Description
Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Confluence | Atlassian / Confluence | >= 2.0.0, < unspecified | affected |
| Confluence | Atlassian / Confluence | >= 6.13.0, < unspecified | affected |
| Confluence | Atlassian / Confluence | >= 6.14.0, < unspecified | affected |
| Confluence | Atlassian / Confluence | >= 6.15.0, < unspecified | affected |
| Confluence | Atlassian / Confluence | >= 6.7.0, < unspecified | affected |
| Confluence | Atlassian / Confluence | >= unspecified, < 6.15.2 | affected |
| Confluence | Atlassian / Confluence | >= unspecified, < 6.6.13 | affected |
| Confluence | Atlassian / Confluence | >= unspecified, < 6.12.4 | affected |
| Confluence | Atlassian / Confluence | >= unspecified, < 6.13.4 | affected |
| Confluence | Atlassian / Confluence | >= unspecified, < 6.14.3 | affected |