Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2017/04/05 12:43 a.m.129 views

Unauthenticated users can view the content of Confluence blogs and pages (CVE-2017-7415)

The Confluence drafts diff rest resource made the current content of all blogs and pages in Confluence available without authentication by providing a page id or draft id. Attackers who can access the Confluence web interface of a vulnerable version can use this vulnerability to obtain the conten...

7.5CVSS1.2AI score0.04387EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder