4306 matches found
Attachments that are added to drafts while collaborative editing is off are searchable when collaborative editing is turned on
h3. Issue Summary This is reproducible on Data Center: yes h3. Steps to Reproduce Turn OFF collaborative editing Create a page Add attachment to the page Do not publish the page Try searching for the draft or attachment Enable Collaborative Editing Perform Reindexing Try searching for the draft o...
Vulnerable version of xmlsec used - CVE-2021-40690 in atlassian-authentication-plugin
Recently we have identified that on top of the libraries mentioned in JRASERVER-73580, there was another libraryatlassian-authentication-plugin that has a transitive dependency of xmlsec that could be related to the vulnerability described in...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Installation Download the Python scri...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Installation git clone https://github.com/CJ-0107/cve-20...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 ATLASIAN-Confluence RCE Installa...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
PoC exploit for CVE-2022-26134, a remote code execution vulnerab...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This is a PoC exploit for CVE-2022-26134, an OGNL injection vuln...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
It is an offensive tool for web exploitation. The repository is...
Critical severity command injection vulnerability - CVE-2022-43781
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to gain code execution on the system. This vulnerability was introduced in Bitbucket Server and Data Center...
PT-2022-5667 · Atlassian · Bitbucket Server +1
Name of the Vulnerable Software and Affected Versions: Atlassian Bitbucket Server and Data Center affected versions not specified Description: The issue is related to a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to...
PT-2022-5616 · Microsoft · Windows Cryptoapi +1
Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows CryptoAPI, which can be exploited to bypass authentication. This vulnerability allows an attacker to conduct spoofi...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134-LAB Confluence Server and Confluence Data Cent...
Actively exploited vulnerability in Bitbucket Server and Data Center
On September 29, 2022 the Cybersecurity & Infrastructure Security Agency CISA added three vulnerabilities to the catalog of known to be exploited vulnerabilities. One of them is a vulnerability in Atlassians Bitbucket Server and Data Center. The other two are the Exchange Server zero-day...
PT-2022-6919 · Atlassian +4 · Bamboo Server +9
Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions prior to 2.13.4 Bamboo Data Center and Server versions 9.1.0, 9.2.1, and 9.3.0 Bitbucket Data Center and Server versions 7.17.0, 7.21.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, 8.12.0, and 8.13.0 Description:...
PT-2022-6920
Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.4.0-rc1 through 2.12.7.1 FasterXML jackson-databind versions 2.13.x through 2.13.4.1 Bamboo Data Center and Server versions 9.1.0 through 9.2.4 Bamboo Data Center and Server versions 9.3.0 through 9.3.2...
VulnCheck KEV: CVE-2022-36804
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before...
PT-2022-25243 · Atlassian +6 · Confluence +7
Name of the Vulnerable Software and Affected Versions: Apache XML Graphics Batik version 1.14 Confluence Data Center and Server versions 7.13.0 through 7.19.0 Description: A Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a J...
CVE-2021-33081
Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...