Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:CONFSERVER-60854
HistoryJan 06, 2021 - 11:46 p.m.

DoS by uploading a lot of data for avatars in Confluence - CVE-2020-29450

2021-01-0623:46:19
security-metrics-bot
jira.atlassian.com
12

0.001 Low

EPSS

Percentile

46.4%

Affected versions of Atlassian Confluence Server allow remote attackers to impact the applicationā€™s availability via a Denial of Service (DoS) vulnerability in the avatar upload feature in Confluence.

The affected versions are before version 7.2.0.

Affected versions:

  • version < 7.2.0

Fixed versions:

  • 7.2.0

0.001 Low

EPSS

Percentile

46.4%

Related for ATLASSIAN:CONFSERVER-60854