CVE-2024-21683
🗓️ 21 May 2024 23:00:00Reported by atlassianType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 534 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 33 |
|---|---|---|---|---|
 | Exploit for Code Injection in Atlassian Confluence_Data_Center | 29 Nov 202413:27 | – | githubexploit |
| Exploit for Code Injection in Atlassian Confluence_Data_Center | 4 Jun 202412:00 | – | githubexploit |
| Exploit for Code Injection in Atlassian Confluence_Data_Center | 24 May 202405:38 | – | githubexploit |
| Exploit for Code Injection in Atlassian Confluence_Data_Center | 23 May 202402:10 | – | githubexploit |
| Exploit for Code Injection in Atlassian Confluence_Data_Center | 27 May 202411:14 | – | githubexploit |
| Exploit for Code Injection in Atlassian Confluence_Data_Center | 23 May 202409:05 | – | githubexploit |
 | Atlassian Confluence Administrator Code Macro Remote Code Execution Exploit | 15 Jul 202400:00 | – | zdt |
 | Atlassian Confluence Server Code Execution | 24 May 202400:00 | – | bdu_fstec |
 | CVE-2024-21683 | 22 May 202416:49 | – | circl |
 | Atlassian Confluence Data Center and Server security vulnerabilities | 21 May 202400:00 | – | cnnvd |
10
Node
OR
Node
OR
Node
OR
Node
OR
Node
OR
Node
OR
[
{
"vendor": "Atlassian",
"product": "Confluence Data Center",
"versions": [
{
"version": "8.9.0",
"status": "affected"
},
{
"version": "8.8.0 to 8.8.1",
"status": "affected"
},
{
"version": "8.7.1 to 8.7.2",
"status": "affected"
},
{
"version": "8.6.0 to 8.6.2",
"status": "affected"
},
{
"version": "8.5.0 to 8.5.8",
"status": "affected"
},
{
"version": "8.4.0 to 8.4.5",
"status": "affected"
},
{
"version": "8.3.0 to 8.3.4",
"status": "affected"
},
{
"version": "8.2.0 to 8.2.3",
"status": "affected"
},
{
"version": "8.1.0 to 8.1.4",
"status": "affected"
},
{
"version": "8.0.0 to 8.0.4",
"status": "affected"
},
{
"version": "7.20.0 to 7.20.3",
"status": "affected"
},
{
"version": "7.19.0 to 7.19.21",
"status": "affected"
},
{
"version": "8.9.1 to 8.9.2",
"status": "unaffected"
},
{
"version": "8.5.9 to 8.5.10",
"status": "unaffected"
},
{
"version": "7.19.22 to 7.19.23",
"status": "unaffected"
}
]
}
]| Source | Link |
|---|---|
| confluence | www.confluence.atlassian.com/pages/viewpage.action |
| jira | www.jira.atlassian.com/browse/CONFSERVER-95832 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| atl_token | request body | /admin/plugins/newcode/addlanguage.action | Authenticated RCE via the 'Add New Language' feature in the 'Configure Code Macros' section. Insufficient validation of the uploaded language file allows for arbitrary code execution via the Rhino script engine. | CWE-94 |
| languageFile | request body | /admin/plugins/newcode/addlanguage.action | Authenticated RCE via the 'Add New Language' feature in the 'Configure Code Macros' section. Insufficient validation of the uploaded language file allows for arbitrary code execution via the Rhino script engine. | CWE-94 |
| newLanguageName | request body | /admin/plugins/newcode/addlanguage.action | Authenticated RCE via the 'Add New Language' feature in the 'Configure Code Macros' section. Insufficient validation of the uploaded language file allows for arbitrary code execution via the Rhino script engine. | CWE-94 |
| file | request body | /upload | Alternative RCE vector via an upload endpoint where a malicious script (e.g., Python) can be uploaded and executed on the server. | CWE-94 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 07:09Current
8.8High risk
Vulners AI Score8.8
CVSS 3.18.8
EPSS0.88267
SSVC