Medium severity6.1NVD Advisory· Published Dec 5, 2017· Updated May 13, 2026
CVE-2017-16856
CVE-2017-16856
Description
The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabilities in various rss properties which were used as links without restriction on their scheme.
Affected products
2All versions prior to version 6.5.2+ 1 more
- (no CPE)range: All versions prior to version 6.5.2
- cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*range: <6.5.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/102094nvdThird Party AdvisoryVDB Entry
- jira.atlassian.com/browse/CONFSERVER-54395nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.