The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro.

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.3.4.
It is, therefore, affected by a reflected cross-site scripting vulnerability in the usermacros resource.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2017-18084

medium

Tenable Plugins

medium