Lucene search
Security-metrics-botATLASSIAN:CONFSERVER-60469HistoryNov 10, 2020 - 12:03 a.m.
Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448
2020-11-1000:03:08
security-metrics-bot
jira.atlassian.com
300
0.96 High
EPSS
Percentile
99.5%
The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
h3. Affected versions:
- version < 6.13.18
- 6.14.0 β€ version < 7.4.6
- 7.5.0 β€ version < 7.8.3
h4. Fixed versions:
- 6.13.18
- 7.4.6
- 7.8.3
- 7.9.0
This vulnerability is attributed to Amit Laish, a security researcher from GE Digital.
Related
atlassian
atlassian
Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448
2020-11-10 00:03:08
Pre-Authorization Arbitrary File Read in /s/ endpoint - CVE-2021-26085
2021-07-21 00:18:45
Pre-Authorization Arbitrary File Read in /s/ endpoint - CVE-2021-26085
2021-07-21 00:18:45
checkpoint_advisories
checkpoint_advisories
hackerone
hackerone
MariaDB: Path Traversal CVE-2021-26086 CVE-2021-26085
2021-10-13 12:36:15
cvelist
cvelist
openvas
openvas
'/;/WEB-INF/' Information Disclosure Vulnerability (HTTP)
2021-10-06 00:00:00
prion
prion
Design/Logic Flaw
2021-03-01 17:15:00
Path traversal
2021-02-22 21:15:00
Arbitrary file deletion
2021-08-03 00:15:00
cve
cve
nvd
nvd
nessus
nessus
githubexploit
githubexploit
Exploit for Missing Authorization in Atlassian Confluence
2021-10-06 20:03:22
Exploit for Path Traversal in Atlassian Jira Data Center
2021-10-05 14:09:52
Exploit for Missing Authorization in Atlassian Confluence
2021-10-05 08:20:25
nuclei
nuclei
Atlassian Confluence Server - Local File Inclusion
2021-12-20 09:50:14
Atlassian Jira Limited - Local File Inclusion
2021-08-26 03:45:56
zdt
zdt
cnvd
cnvd
Atlassian System dashboard-Jira is vulnerable to unauthorized access
2022-06-15 00:00:00
packetstorm
packetstorm
Atlassian Jira Server/Data Center 8.4.0 File Read
2021-10-05 00:00:00
Atlassian Confluence Server 7.5.1 Arbitrary File Read
2021-10-05 00:00:00
seebug
seebug
Atlassian Jira ζδ»Άθ―»εζΌζ΄οΌCVE-2021-26086οΌ
2021-08-20 00:00:00
cisa_kev
cisa_kev
attackerkb
attackerkb
CVE-2021-26085
2021-07-29 00:00:00
dsquare
dsquare
Confluence < 7.12.3 File Disclosure
2021-09-07 00:00:00
exploitdb
exploitdb
Atlassian Jira Server Data Center 8.16.0 - Arbitrary File Read
2021-10-06 00:00:00
Atlassian Confluence 7.12.2 - Pre-Authorization Arbitrary File Read
2021-10-05 00:00:00