description: The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.
problem types: Content Spoofing
affected:
{
product: Confluence
vendor: Atlassian
versions:
lessThan: 6.6.1, status: affected, version: unspecified, versionType: custom
}