CVE-2018-20237

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature...

CVE-2018-20237

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature...

CVE-2018-20237

Confluence Server/Data Center prior to version 6.13.1 is affected by an information-disclosure vulnerability in the Word Export feature. An authenticated user can download content from deleted pages, exposing partially confidential data. Root cause: Word Export component allows access to deleted ...

Download a deleted page via word export - CVE-2018-20237

Atlassian Confluence Server from version 6.12.0 or earlier, and before version 6.13.1, or before version 6.14.0 allows an authenticated user to download a deleted page via the word export feature...

Download a deleted page via word export - CVE-2018-20237

Atlassian Confluence Server from version 6.12.0 or earlier, and before version 6.13.1, or before version 6.14.0 allows an authenticated user to download a deleted page via the word export feature...

On error at /rest/ stack-trace is publicly visible

h3. Summary On Confluence server 6.12.2 requesting wrong REST URL /rest/cql/contenttypes?category=test we will see full stack-trace. The same we can see at https://confluence.atlassian.com/rest/cql/contenttypes?category=test On production, a regular user should not see the stack-trace when an err...

Confluence Server Script Injection Vulnerability

Atlassian Confluence Server is a suite of professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing amongst team members. Confluence Server suffers...

Confluence Server vulnerable to script injection

Overview User Macros of Confluence Server provided by Atlassian Pty Ltd. contains a script injection vulnerability CWE-74. Kanta Nishitani of Information Science College reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#37943805: Confluence Server vulnerable to script injection

User Macros of Confluence Server provided by Atlassian Pty Ltd. contains a script injection vulnerability CWE-74. Impact When the administrator embeds a malicious script into User Macros, the embedded script may be executed on the user's web browser. Solution Update the Software Update to the...

Atlassian Confluence MESILAT Zabbix Plugin Arbitrary File Read Vulnerability

Atlassian Confluence is a suite of professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build enterprise WiKi.The software enables collaboration and knowledge sharing among team members.MESILAT Zabbix Plugin is one of the Zabb...

CVE-2018-18289

The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files...

CVE-2018-18289

The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files...

CVE-2018-18289

The CVE-2018-18289 entry concerns the MESILAT Zabbix Plugin for Atlassian Confluence, affected when using versions prior to 1.1.15. The vulnerability enables an attacker to read arbitrary files through the plugin. Public details in connected records confirm the affected product and vulnerable com...

confluence.winet.ch XSS vulnerability

Open Bug Bounty ID: OBB-665848 Description| Value ---|--- Affected Website:| confluence.winet.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

confluence.humanhealthproject.org XSS vulnerability

Open Bug Bounty ID: OBB-665842 Description| Value ---|--- Affected Website:| confluence.humanhealthproject.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

confluence.welchmancloud.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-665837 Description| Value ---|--- Affected Website:| confluence.welchmancloud.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

confluence.dieurbanisten.de XSS vulnerability

Open Bug Bounty ID: OBB-665819 Description| Value ---|--- Affected Website:| confluence.dieurbanisten.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wikis-test.uit.tufts.edu XSS vulnerability

Open Bug Bounty ID: OBB-665818 Description| Value ---|--- Affected Website:| wikis-test.uit.tufts.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

confluence.mccinfo.net XSS vulnerability

Open Bug Bounty ID: OBB-665816 Description| Value ---|--- Affected Website:| confluence.mccinfo.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wiki.shibboleth.net XSS vulnerability

Open Bug Bounty ID: OBB-665797 Description| Value ---|--- Affected Website:| wiki.shibboleth.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...