Vulnerability Bulletins |
CVE-2015-8398 |
|
| Affected software | ATLASSIAN |
| Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest/prototype/1/session/check. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2015-8398 | |