189 matches found
MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials
SummaryMissing path validation in confluenceuploadattachment allows any authenticated MCP client to read arbitrary files from the server filesystem and exfiltrate their contents to Confluence. On Linux deployments, /proc/self/environ yields all runtime secrets in a single call.---...
7.7CVSS6.2AI score0.00408EPSS
SaveExploits1References8Affected Software1
20