Description
Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind server-side request forgery vulnerability in Team Calendars parameters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Confluence Server | unspecified – < 7.4.8, 7.5.0 – < unspecified, unspecified – < 7.11.0 | 7.4.8 |