NA

CVE-2023-22504

Published: 25/05/2023 Updated: 07/06/2023
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.

Vulnerable Product Search on Vulmon Subscribe to Product

atlassian confluence server