2957 matches found
CVE-2021-43940
Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the local system via a DLL Hijacking vulnerability in the Confluence installer. This vulnerability only affects installations of Confluence Server and Data Center...
Atlassian Confluence Server 代码问题漏洞
Atlassian Confluence Server is a server version of Atlassian Australia's suite of collaborative software with enterprise knowledge management capabilities and support for building enterprise WiKi. An elevation of privilege vulnerability exists in Atlassian Confluence Server, which stems from an...
PT-2022-11940 · Atlassian +1 · Confluence +1
Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server and Data Center versions prior to 7.4.10 Atlassian Confluence Server and Data Center versions 7.5.0 through 7.12.3 Description: The issue allows authenticated local attackers to achieve elevated privileges on the...
PT-2022-6598
Name of the Vulnerable Software and Affected Versions minimatch versions 7.19.0 and earlier Confluence Data Center versions prior to 9.1.0 Description A vulnerability was found in the minimatch package, allowing a Regular Expression Denial of Service ReDoS when calling the braceExpand function wi...
Atlassian Confluence Server Arbitrary File Read (CVE-2021-26085; CVE-2021-26086)
An arbitrary file read vulnerability exists in Atlassian Confluence Server. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to access and read arbitrary file...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This is a PoC exploit for CVE-2021-26084, a pre-auth RCE injecti...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
This is a PoC exploit for CVE-2021-26084, a pre-auth RCE injecti...
Cerber targeting organizations with publicly available exploits
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. Cerber, ransomware that mysteriously vanished in 2019, has reappeared with a new encryption. The new cerber includes fresh source code and makes use of the new library Crypto+++, whereas the previous form made use of Windows...
PT-2021-15419
Name of the Vulnerable Software and Affected Versions Atlassian Confluence versions prior to 7.4.11 Atlassian Confluence versions 7.3.0 through 7.3.6 Atlassian Confluence versions 7.0.0 through 7.0.14 Atlassian Confluence versions 6.13.0 through 6.15.9 Description The issue allows authenticated...
(Vulnerability) The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center, related to incorrect processing of Object Graph Navigation Language (OGNL) expressions, allows attackers to execute arbitrary code.
The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to incorrect processing of expressions in the Object Graph Navigation Language OGNL. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
VulnCheck KEV: CVE-2019-3398
Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution...
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language OGNL injection vulnerability that may allow an unauthenticated attacker to execute code...
Atlassian Confluence Server and Data Center Path Traversal Vulnerability
Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution...
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution...
Upgrade Confluence to latest Adopt OpenJDK versions 11.0.13
h3. Issue Summary Upgrade Confluence to latest Adopt OpenJDK versions 11.0.13...
Upgrade Confluence to latest Adopt OpenJDK versions 11.0.13
h3. Issue Summary Upgrade Confluence to latest Adopt OpenJDK versions 11.0.13...
Unicode characters allow malicious code to be hidden from a human reviewer (Confluence Server) - CVE-2021-42574
Researchers at the University of Cambridge reported a vulnerability affecting Confluence Server / DC where special characters, known as Unicode bidirectional override characters, are not rendered or displayed in the affected applications. These special characters are typically not displayed by th...
Unicode characters allow malicious code to be hidden from a human reviewer (Confluence Server) - CVE-2021-42574
Researchers at the University of Cambridge reported a vulnerability affecting Confluence Server / DC where special characters, known as Unicode bidirectional override characters, are not rendered or displayed in the affected applications. These special characters are typically not displayed by th...