← CVE Intelligence

CVE-2020-4027

Atlassian / Confluence Server PUBLISHED

Description (CNA)

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

Affected (CNA)

Vendor / productVersions
Atlassian / Confluence Serveraffected unspecified before 7.4.5; affected 7.5.0 before unspecified; affected unspecified before 7.5.1
Atlassian / Confluence Data Centeraffected unspecified before 7.4.5; affected 7.5.0 before unspecified; affected unspecified before 7.5.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.