Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-22503
HistoryMay 01, 2023 - 5:15 p.m.

Information disclosure

2023-05-0117:15:00
PRIOn knowledge base
www.prio-n.com
2
atlassian
confluence
information disclosure
vulnerability
remote attackers
attachment names
label names
security advisory

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Information Disclosure vulnerability in the macro preview feature.

This vulnerability was reported by Rojan Rijal of the Tinder Security Engineering team.

The affected versions are before version 7.13.15, from version 7.14.0 before 7.19.7, and from version 7.20.0 before 8.2.0.

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

Related for PRION:CVE-2023-22503