High WID-SEC-2024-0084 3 CVEs

Atlassian Confluence: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jan 15, 2024 · Updated Jan 15, 2024 · de-DE

Vendor: Atlassian Product: Confluence Product: Confluence < 7.19.18 Product: Confluence < 8.5.5 Product: Confluence < 8.7.2 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Atlassian Confluence ausnutzen, um beliebigen Code auszuführen.

Product

Confluence ist eine kommerzielle Wiki-Software.

Vulnerabilities 3

High 8.6

CVE-2024-21674

This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center…

Atlassian Confluence Data Center Confluence Server Web / CMS

Jan 16, 2024
High 8.3

CVE-2024-21672

This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center …

Atlassian Confluence Server Confluence Data Center Web / CMS

Jan 16, 2024
High 8.0

CVE-2024-21673

This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Cente…

Atlassian Confluence Server Confluence Data Center Web / CMS

Jan 16, 2024

Revision history

2024-01-15 #1
Initiale Fassung

References

Atlassian Security Advisory vom 2024-01-15
https://jira.atlassian.com/browse/CONFSERVER-94066
GitHub Advisory Database vom 2024-01-15
https://github.com/advisories/GHSA-p3fj-jhx6-26mr
Atlassian Security Advisory vom 2024-01-15
https://jira.atlassian.com/browse/CONFSERVER-94064
GitHub Advisory Database vom 2024-01-15
https://github.com/advisories/GHSA-pcmh-49qc-2rx3
Atlassian Security Advisory vom 2024-01-15
https://jira.atlassian.com/browse/CONFSERVER-94065