CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2019-15053

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 82.2%

CVSS Severity

CVSS v3 Score 6.8

CVSS v2 Score 6.0

References

https://github.com/l0nax/CVE-2019-15053
https://marketplace.atlassian.com/apps/4885/html-include-and-replace-macro?hosting=server&tab=versions
https://github.com/l0nax/CVE-2019-15053
https://marketplace.atlassian.com/apps/4885/html-include-and-replace-macro?hosting=server&tab=versions

Products affected by CVE-2019-15053

Atlassian » Html Include And Replace Macro » Version: 1.4.0

cpe:2.3:a:atlassian:html_include_and_replace_macro:1.4.0
Atlassian » Html Include And Replace Macro » Version: 1.4.1

cpe:2.3:a:atlassian:html_include_and_replace_macro:1.4.1
Atlassian » Html Include And Replace Macro » Version: 1.4.2

cpe:2.3:a:atlassian:html_include_and_replace_macro:1.4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-15053

Products

Pricing

Contact Us