Unscored CVE-2018-20237 EUVD-2018-12803GHSA-6cff-mj8v-fvr9

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word expo…

Published Feb 13, 2019 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Confluence Data Center Product: Confluence Server Category: Web / CMS

Description

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature.

Affected products

Vendor	Product	Affected	Fixed
Atlassian	Confluence Server	unspecified – < 6.13.1	6.13.1
Atlassian	Confluence Data Center	unspecified – < 6.13.1	6.13.1

References

https://jira.atlassian.com/browse/CONFSERVER-57814
107041 vdb-entry
https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20237/