Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv3

CVE-2019-15053

Published: 14/08/2019 Updated: 21/08/2019
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
CVSS v3 Base Score: 6.8 | Impact Score: 4.7 | Exploitability Score: 2.1
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Subscribe to Atlassian

Vulnerability Summary

The "HTML Include and replace macro" plugin prior to 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

atlassian html include and replace macro

Github Repositories

https://github.com/l0nax/CVE-2019-15053

(FAB-2019-00156) Vulnerability discoverd by me CVE-2019-15053

CVE-2019-15053 (FAB-2019-00156) Vulnerability discoverd by me CVE-2019-15053 Advisory: advisorytxt Basic Info Advisory ID: FAB-2019-00156 Product: HTML Include and replace macro Manufacturer: The Plugin People Affected Version(s): 142 and before Tested Version(s): 142 Vulnerability Type: Cross-Site Scripting (CWE-79) Risk Level

References

CWE-79https://marketplace.atlassian.com/apps/4885/html-include-and-replace-macro?hosting=server&tab=versionshttps://github.com/l0nax/CVE-2019-15053https://nvd.nist.govhttps://github.com/l0nax/CVE-2019-15053
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
HTML injectionCVE-2024-35894SQLCVE-2024-5105CVE-2014-100005CVE-2024-35895unauthorizedCVE-2024-22120CVE-2024-35890
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook