Description
Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Confluence Server | Atlassian / Confluence Server | >= 6.7.0, < unspecified | affected |
| Confluence Server | Atlassian / Confluence Server | >= next of 6.13.0, < unspecified | affected |
| Confluence Server | Atlassian / Confluence Server | >= next of 6.14.0, < unspecified | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 6.14.2 | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 6.12.3 | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 6.6.12 | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 6.13.3 | affected |