Approved changes feed: RSS · Atom

cpe:2.3:a:atlassian:html_include_and_replace_macro:*:*:*:*:*:confluence:*:*

part: a version: * update: *

VendorAtlassian (8acde0d4-2b83-5bd8-8d3f-60d59e0b022e)
ProductHtml Include And Replace Macro (173e11e7-2d15-5ae6-b68b-51a08569b320)
Edition*
Language*
Software edition*
Target softwareconfluence
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15053 vulnerable 2026-06-03 14:39:47.010027 Details available
The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element.
Published: 2019-08-14T16:05:33.000Z
Updated: 2024-08-05T00:34:53.213Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.