Server side request forgery (ssrf)

2020-08-2920:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the “Table from CSV” macro (URL parameter).

CPENameOperatorVersion
table_filter_and_charts_for_confluence_serverlt5.3.26

CPE	Name	Operator	Version
	table_filter_and_charts_for_confluence_server	lt	5.3.26

References

stiltsoft.atlassian.net/browse/VD-1