CVE-2024-21683

🗓️ 21 May 2024 23:00:00Reported by atlassianType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 489 Views🌐 WEB

High severity RCE vulnerability in Confluence 5.2, requires immediate patchin

Reporter	Title	Published	Views	Family All 27
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	29 Nov 202413:27	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	4 Jun 202412:00	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	24 May 202405:38	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	23 May 202402:10	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	27 May 202411:14	–	githubexploit
GithubExploit	Exploit for Code Injection in Atlassian Confluence_Data_Center	23 May 202409:05	–	githubexploit
0day.today	Atlassian Confluence Administrator Code Macro Remote Code Execution Exploit	15 Jul 202400:00	–	zdt
BDU FSTEC	The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date processing system, related to errors in handling input data, allows a perpetrator to execute arbitrary code.	24 May 202400:00	–	bdu_fstec
Circl	CVE-2024-21683	22 May 202416:49	–	circl
CNNVD	Atlassian Confluence Data Center and Server 安全漏洞	21 May 202400:00	–	cnnvd

NVD

Node

atlassian confluence_data_centerRange7.19.0–7.19.24lts

atlassian confluence_data_centerRange7.20.0–7.20.3

atlassian confluence_data_centerRange8.0.0–8.0.4

atlassian confluence_data_centerRange8.1.0–8.1.4

atlassian confluence_data_centerRange8.2.0–8.2.3

atlassian confluence_data_centerRange8.3.0–8.3.4

atlassian confluence_data_centerRange8.4.0–8.4.5

atlassian confluence_data_centerRange8.5.0–8.5.11lts

atlassian confluence_data_centerRange8.6.0–8.6.2

atlassian confluence_data_centerRange8.9.0–8.9.3

atlassian confluence_data_centerMatch8.7.1

atlassian confluence_data_centerMatch8.7.2

atlassian confluence_data_centerMatch8.8.0

atlassian confluence_data_centerMatch8.8.1

Node

atlassian confluence_serverRange7.19.0–7.19.24lts

atlassian confluence_serverRange7.20.0–7.20.3

atlassian confluence_serverRange8.0.0–8.0.4

atlassian confluence_serverRange8.1.0–8.1.4

atlassian confluence_serverRange8.2.0–8.2.3

atlassian confluence_serverRange8.3.0–8.3.4

atlassian confluence_serverRange8.4.0–8.4.5

atlassian confluence_serverRange8.5.0–8.5.11lts

atlassian confluence_serverRange8.6.0–8.6.2

atlassian confluence_serverRange8.9.0–8.9.2

atlassian confluence_serverMatch8.7.1

atlassian confluence_serverMatch8.7.2

atlassian confluence_serverMatch8.8.0

atlassian confluence_serverMatch8.8.1

Node

atlassian fisheyeRange4.8.0–4.8.15

Node

atlassian crucibleRange4.8.0–4.8.15

Node

atlassian jira_data_centerRange9.4.0–9.4.21lts

atlassian jira_data_centerRange9.12.0–9.12.8lts

Node

atlassian jira_serverRange9.4.0–9.4.21lts

atlassian jira_serverRange9.12.0–9.12.8lts

Node

atlassian jira_service_managementRange5.4.0–5.4.21data_center

atlassian jira_service_managementRange5.12.0–5.12.8data_center

atlassian jira_service_managementRange5.15.2–5.16.0data_center

Node

atlassian jira_service_managementRange5.4.0–5.4.21server

atlassian jira_service_managementRange5.12.0–5.12.8server

atlassian jira_service_managementMatch5.15.2server

[
  {
    "vendor": "Atlassian",
    "product": "Confluence Data Center",
    "versions": [
      {
        "version": "8.9.0",
        "status": "affected"
      },
      {
        "version": "8.8.0 to 8.8.1",
        "status": "affected"
      },
      {
        "version": "8.7.1 to 8.7.2",
        "status": "affected"
      },
      {
        "version": "8.6.0 to 8.6.2",
        "status": "affected"
      },
      {
        "version": "8.5.0 to 8.5.8",
        "status": "affected"
      },
      {
        "version": "8.4.0 to 8.4.5",
        "status": "affected"
      },
      {
        "version": "8.3.0 to 8.3.4",
        "status": "affected"
      },
      {
        "version": "8.2.0 to 8.2.3",
        "status": "affected"
      },
      {
        "version": "8.1.0 to 8.1.4",
        "status": "affected"
      },
      {
        "version": "8.0.0 to 8.0.4",
        "status": "affected"
      },
      {
        "version": "7.20.0 to 7.20.3",
        "status": "affected"
      },
      {
        "version": "7.19.0 to 7.19.21",
        "status": "affected"
      },
      {
        "version": "8.9.1 to 8.9.2",
        "status": "unaffected"
      },
      {
        "version": "8.5.9 to 8.5.10",
        "status": "unaffected"
      },
      {
        "version": "7.19.22 to 7.19.23",
        "status": "unaffected"
      }
    ]
  }
]

Source	Link
confluence	www.confluence.atlassian.com/pages/viewpage.action
jira	www.jira.atlassian.com/browse/CONFSERVER-95832

Parameter	Position	Path	Description	CWE
atl_token	upload data	admin/plugins/newcode/addlanguage.action	Authenticated admin can upload a code-macro language file which can be crafted to execute arbitrary code on the server (RCE).	CWE-94
languageFile	upload data	admin/plugins/newcode/addlanguage.action	Authenticated admin can upload a code-macro language file which can be crafted to execute arbitrary code on the server (RCE).	CWE-94
newLanguageName	upload data	admin/plugins/newcode/addlanguage.action	Authenticated admin can upload a code-macro language file which can be crafted to execute arbitrary code on the server (RCE).	CWE-94
atl_token	nested	admin/plugins/newcode/configure.action	Endpoint used to configure and upload a new code macro language (part of the exploit workflow for RCE).	CWE-94
languageFile	nested	admin/plugins/newcode/configure.action	Endpoint used to configure and upload a new code macro language (part of the exploit workflow for RCE).	CWE-94
newLanguageName	nested	admin/plugins/newcode/configure.action	Endpoint used to configure and upload a new code macro language (part of the exploit workflow for RCE).	CWE-94
operating.system	nested	admin/systeminfo.action	Endpoint used to retrieve host OS information as part of choosing shell payload (win vs nix).	CWE-94
file	upload data	upload	Generic PoC payload upload to trigger remote code execution via uploaded exploit content.	CWE-94

17 Jun 2026 07:09Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.88267

SSVC