Server side request forgery (ssrf)

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery SSRF vulnerability...

CVE-2021-26072

CVE-2021-26072 affects Atlassian Confluence Server/Data Center prior to 5.8.6, where the WidgetConnector plugin permits blind SSRF allowing remote attackers to manipulate internal network resources. The issue arises from insecure server-side requests triggered by the widgetconnector, with exploit...

CVE-2021-26072

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery SSRF vulnerability...

CVE-2021-26072: Server-Side Request Forgery (SSRF)

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery SSRF vulnerability...

Atlassian Confluence Server and Confluence 代码问题漏洞

Atlassian Confluence Server and Atlassian Confluence are both products of Atlassian Australia.Atlassian Confluence Server is the server version of a suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. Atlassian Confluence is ...

PT-2021-16939

Name of the Vulnerable Software and Affected Versions Confluence Server versions prior to 5.8.6 Confluence Data Center versions prior to 5.8.6 Description The issue allows remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery SSRF...

CVE-2020-29448

The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center before version 6.13.18, from 6.14.0 before 7.4.6, and from 7.5.0 before 7.8.3 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect...

Atlassian Confluence Server and Confluence Data Center Security Vulnerabilities

Atlassian Confluence Server and Atlassian Confluence are both products of Atlassian Australia.Atlassian Confluence Server is the server version of a suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. Atlassian Confluence is ...

PT-2021-11667

Name of the Vulnerable Software and Affected Versions: Confluence Server versions prior to 6.13.18 Confluence Server versions 6.14.0 through 7.4.5 Confluence Server versions 7.5.0 through 7.8.2 Confluence Data Center versions prior to 6.13.18 Confluence Data Center versions 6.14.0 through 7.4.5...

CVE-2020-29448: Undefined Security Weakness

The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center before version 6.13.18, from 6.14.0 before 7.4.6, and from 7.5.0 before 7.8.3 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect...

CVE-2020-29450: Unrestricted Upload of File with Dangerous Type

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the avatar upload feature. The affected versions are before version 7.2.0...

Atlassian Confluence Server and Data Center Cross-Site Scripting Vulnerability

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi.Atlassian Confluence Data Center is the data center version of Atlassian Confluence. Atlassian...

CVE-2020-14175

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2...

CVE-2020-14175: Improper Neutralization of Input During Web Page Generation

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2...

Atlassian Confluence Server and Data Center Injection Vulnerabilities

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi.Atlassian Confluence Data Center is the data center version of Atlassian Confluence. Atlassian...

CVE-2020-4027

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version...

CVE-2020-4027: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version...

CVE-2019-15006

There was a man-in-the-middle MITM vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence...

CVE-2019-15006: Improper Control of Dynamically-Managed Code Resources

There was a man-in-the-middle MITM vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence...

PT-2019-13931

Name of the Vulnerable Software and Affected Versions Confluence Server affected versions not specified Confluence Data Center affected versions not specified Description A man-in-the-middle MITM issue was found in the Confluence Previews plugin, which is used for communication with the Atlassian...