CVE-2020-24897

The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) through the provided Markdown markup to the "Table from CSV" macro.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.9 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
mitreCNA
8.9 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:R
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
VendorProductVersion
stiltsofttable_filter_and_charts_for_confluence_server
𝑥
< 5.3.25
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://stiltsoft.atlassian.net/browse/VD-2
https://stiltsoft.atlassian.net/browse/VD-2