Lucene search
PRIOn knowledge basePRION:CVE-2023-22504HistoryMay 25, 2023 - 2:15 p.m.
Improper access control
2023-05-2514:15:00
PRIOn knowledge base
www.prio-n.com
2
improper access control
remote attackers
read permissions
write permissions
upload attachments
broken access control
nvd
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| confluence_server | ge | 7.20.0 | |
| confluence_server | lt | 8.2.2 | |
| confluence_server | ge | 7.14.0 | |
| confluence_server | lt | 7.19.9 | |
| confluence_server | lt | 7.13.17 |
Related
cve
cve
CVE-2023-22504
2023-05-25 14:15:09
nvd
nvd
CVE-2023-22504
2023-05-25 14:15:09
atlassian
atlassian
cvelist
cvelist
CVE-2023-22504
2023-05-25 14:00:02