Atlassian Confluence: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2021-37412)
The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar.
We don't see any plugin installed, how to verify if its removed completely.
@Aryaka IT I would suggest using the KB to manually remove the app from the plugins folder if you are concerned that it could still be causing an issue. https://confluence.atlassian.com/confkb/how-to-manually-remove-malfunctioning-add-ons-113705118.html
We have verified the server plugin folders and confluence DB as per the above URL descriptions and could not find the "Tech Radar" app/plugin . Please advise how to troubleshoot further.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.