Skip to content
OpenAdvisories
Medium WID-SEC-2025-0802 2 CVEs

Atlassian Confluence Data Center und Server: Mehrere Schwachstellen

Published Apr 15, 2025 · Updated Apr 15, 2025 · de-DE

Vendor: Atlassian Product: Confluence Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Atlassian Confluence Data Center und Server ausnutzen, um Dateien zu manipulieren und einen Denial-of-Service-Zustand zu verursachen

Product

Confluence ist eine kommerzielle Wiki-Software.

Vulnerabilities 2

  • High 7.5
    CVE-2025-24970

    SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

    Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of suc…

    netty netty druid thingsboard-tb-node Ubuntu Wolfi Maven
  • Medium 5.9
    CVE-2019-10172 Public exploit EPSS 17%

    Improper Restriction of XML External Entity Reference in jackson-mapper-asl

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

    Red Hat jackson-mapper-asl tez spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References