Countdown Timer for Confluence
Countdown Timer for Confluence
Breadcrumbs

Release Notes for Countdown Timer 1.7.1

Summary

/*<![CDATA[*/ div.rbtoc1764817114841 {padding: 0px;} div.rbtoc1764817114841 ul {list-style: disc;margin-left: 0px;} div.rbtoc1764817114841 li {margin-left: 0px;padding-left: 0px;} /*]]>*/ Bug Fixes XSS in Countdown Timer Issues

Bug Fixes

XSS in Countdown Timer

A cross-site scripting (XSS) vulnerability has been identified and fixed in Countdown Timer.

This vulnerability is rated as Medium according to Atlassian's Severity Levels for Security Issues.

In order to exploit this, users must have permissions to edit content within Confluence

Affected versions:

  • version < 1.7.0

Fixed versions:

  • 1.7.1

Acknowledgement:

We would like to acknowledge Roman Ferdigg from SEC Consult for reporting this vulnerability.


Issues

Key Summary T Status Resolution Data cannot be retrieved due to an unexpected error. View these issues in Jira