← CVE Intelligence

CVE-2023-22504

Atlassian / Confluence Data Center PUBLISHED

Description (CNA)

Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.

Affected (CNA)

Vendor / productVersions
Atlassian / Confluence Data Centerunaffected < 1.1.2; affected >= 1.1.2; affected >= 7.14.0; affected >= 7.20.0; unaffected >= 7.13.7; unaffected >= 7.19.9; unaffected >= 8.2.2; unaffected >= 8.3.0
Atlassian / Confluence Serverunaffected < 1.1.2; affected >= 1.1.2; affected >= 7.14.0; affected >= 7.20.0; unaffected >= 7.13.7; unaffected >= 7.19.9; unaffected >= 8.2.2; unaffected >= 8.3.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.