The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date processing system, related to errors in handling input data, allows a perpetrator to execute arbitrary code.

🗓️ 24 May 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 14 Views

Confluence Server and Data Center input processing flaws enable remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 27
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	29 Nov 202413:27	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	4 Jun 202412:00	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	24 May 202405:38	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	23 May 202402:10	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	27 May 202411:14	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	23 May 202409:05	–	githubexploit
zdt	Atlassian Confluence Administrator Code Macro Remote Code Execution Exploit	15 Jul 202400:00	–	zdt
Circl	CVE-2024-21683	22 May 202416:49	–	circl
CNNVD	Atlassian Confluence Data Center and Server 安全漏洞	21 May 202400:00	–	cnnvd
Tenable Nessus	Atlassian Confluence 5.2 < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.1 RCE (CONFSERVER-95832)	24 May 202400:00	–	nessus

Vulners

Node

OR

atlassian confluence_serverRange8.7.0–8.7.2

atlassian jira_data_centerRange8.4.0–8.4.5

atlassian jira_data_centerRange8.3.0–8.3.4

atlassian jira_data_centerRange8.2.0–8.2.3

atlassian jira_data_centerRange8.1.0–8.1.4

atlassian jira_data_centerRange8.0.0–8.0.4

atlassian jira_data_centerRange7.20.0–7.20.3

atlassian confluence_serverRange8.4.0–8.4.5

atlassian confluence_serverRange8.3.0–8.3.4

atlassian confluence_serverRange8.2.0–8.2.3

atlassian confluence_serverRange8.1.0–8.1.4

atlassian confluence_serverRange8.0.0–8.0.4

atlassian confluence_serverRange7.20.0–7.20.3

atlassian jira_data_centerRange8.6.0–8.6.2

atlassian jira_data_centerRange8.7.1–8.7.2

atlassian jira_data_centerRange8.8.0–8.8.1

atlassian jira_data_centerMatch8.9.0

atlassian confluence_serverRange8.6.0–8.6.2

atlassian confluence_serverRange8.8.0–8.8.1

atlassian confluence_serverMatch8.9.0

Source	Link
confluence	www.confluence.atlassian.com/security/security-bulletin-may-21-2024-1387867145.html
jira	www.jira.atlassian.com/browse/CONFSERVER-95832
web	www.web.nvd.nist.gov/view/vuln/detail

24 May 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 38.8

CVSS 29

EPSS0.88267

Confluence Server Confluence Data Center Date processing flaws Input data handling Remote code execution