VDB
WID-SEC-W-2024-0085
WID-SEC-W-2024-0085
PUBLISHED
Confluence ist eine kommerzielle Wiki-Software.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlassian Confluence < 8.5.4 | ||
| Atlassian Confluence < 8.7.1 | ||
| Atlassian Confluence < 8.6.0 |
Timeline
- Jan 15, 2024 CVE Published
- Jan 21, 2024 CVE Updated
- Feb 8, 2024 PoC Published
References
- https://jira.atlassian.com/browse/CONFSERVER-93833 url
- https://github.com/advisories/GHSA-w64x-j9r3-q79q url
- https://blog.projectdiscovery.io/atlassian-confluence-ssti-remote-code-execution/ url
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0085.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0085 advisory
- https://twitter.com/Shadowserver/status/1749372138685915645 url