CVE-2019-20102
CVE-2019-20102
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
22 Apr 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before version 6.15.5 allows remote attackers to achieve stored cross-site- scripting (SXSS) via a malicious attachment with a modified `mimeType` parameter.
Affected products
Atlassian · Confluence ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →