Description
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Confluence Data Center | Atlassian / Confluence Data Center | >= 7.5.0, < unspecified | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= unspecified, < 7.4.10 | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | >= unspecified, < 7.12.3 | affected |
| Confluence Server | Atlassian / Confluence Server | >= 7.5.0, < unspecified | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 7.4.10 | affected |
| Confluence Server | Atlassian / Confluence Server | >= unspecified, < 7.12.3 | affected |