[#CHK-35] Vulnerabilities in entry values and column attributes allows for injection of javascript code

Confluence Checklists Plugin

Created: 12/Sep/07 04:54 PM Updated: 12/Sep/07 04:54 PM

Component/s:

None

Affects Version/s:

1.1

Fix Version/s:

1.2.1

Time Tracking:

Not Specified

Environment:

Any

Labels:

Description

« Hide

Entry values and column attributes are not HTML encoded. This would allow malicious macros or entry values to inject javascript code.

No exploit has been reported.

All

Comments

Work Log

Change History

FishEye

Crucible

Builds

Sort Order:

[ Permlink | « Hide ]

All values are now properly encoded.