Medium severity6.1NVD Advisory· Published Dec 5, 2017· Updated Jun 17, 2026
CVE-2017-16856
CVE-2017-16856
Description
The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabilities in various rss properties which were used as links without restriction on their scheme.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*range: <6.5.2
- (no CPE)range: <6.5.2
- (no CPE)range: All versions prior to version 6.5.2
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/102094nvdThird Party AdvisoryVDB Entry
- jira.atlassian.com/browse/CONFSERVER-54395nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.