Lucene search
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_113248HistoryJun 04, 2022 - 12:00 a.m.
Atlassian Confluence Namespace OGNL Injection
2022-06-0400:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
30
Atlassian Confluence Server and Data Center versions 1.3.x < 7.4.17, 7.13.x < 7.13.7, 7.14.x < 7.14.3, 7.15.x < 7.15.2, 7.16.x < 7.16.4, 7.17.x < 7.17.4 and 7.18.x < 7.18.1 suffer from an OGNL injection vulnerability by crafting a specific URL, allowing an unauthenticated attacker to perform a remote code execution on the target application.
No source data| Vendor | Product | Version | CPE |
|---|---|---|---|
| atlassian | confluence | * | cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:* |