CVE-2018-13389: Input Validation
Published Jul 10, 2018
·Updated
The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.
Affected Software
1 affected component
Atlassian Confluence<6.6.1
Remediation
Patch Available
Event History
Jul 10, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2018-13389.
2
What is the title of the vulnerability?
The title of the vulnerability is 'The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content'.
3
What is the severity of CVE-2018-13389?
The severity of CVE-2018-13389 is medium with a severity value of 4.7.
4
How does CVE-2018-13389 affect Atlassian Confluence?
CVE-2018-13389 affects Atlassian Confluence before version 6.6.1.
5
How can remote attackers exploit CVE-2018-13389?
Remote attackers can exploit CVE-2018-13389 by spoofing web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.