Atlassian Confluence Search Cross-Site Scripting Vulnerability

Bugtraq ID:	15688
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 02 2005 12:00AM
Updated:	Dec 02 2005 12:00AM
Credit:	r0t is credited with the discovery of this vulnerability.
Vulnerable:	Atlassian Confluence 2.0.1 build 321 Atlassian Confluence 1.4
Not Vulnerable:	Atlassian Confluence 2.0.2

Atlassian Confluence Search Cross-Site Scripting Vulnerability

Confluence is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Atlassian Confluence Search Cross-Site Scripting Vulnerability

No exploit is required.

Atlassian Confluence Search Cross-Site Scripting Vulnerability

Solution:
Updates for Confluence 2.0.1 and earlier are available; please see the referenced fix and references for further details.


Atlassian Confluence 1.4

• Atlassian Confluence Patches
  http://jira.atlassian.com/browse/CONF-4825

Atlassian Confluence 2.0.1 build 321

• Atlassian Confluence Patches
  http://jira.atlassian.com/browse/CONF-4825

Atlassian Confluence Search Cross-Site Scripting Vulnerability

References:

• Atlassian Confluence Web Site (Atlassian)
  
• Confluence - the Enterprise Wiki, XSS vuln. (r0t)
  
• Confluence Security Advisory 2005-12-05 (Atlassian)
  
• Search results page needs to XML encode the query string provided by the user. (Atlassian)