Lucene search
+L

189 matches found

PyPA
PyPA
•added 2026/10/01 4:38 p.m.•2 views

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

SummaryMissing path validation in confluenceuploadattachment allows any authenticated MCP client to read arbitrary files from the server filesystem and exfiltrate their contents to Confluence. On Linux deployments, /proc/self/environ yields all runtime secrets in a single call.---...

7.7CVSS6.2AI score0.00408EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder