DeutschShown in its original language — a full translation is planned for a future version.
Atlassian Confluence: Mehrere Schwachstellen
view advisory published 2024-07-16
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Atlassian Confluence ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, einen Cross-Stite-Scripting-Angriff oder einen unspezifischen Angriff durchzuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-21688US | — | — | ||
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. | ||||
| CVE-2024-21686US | high8.7 | — | ||
This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server.
This Stored XSS vulnerability, with a CVSS Score of 7.3, allows a… | ||||
| CVE-2021-36090US | high7.5 | — | ||
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35517US | high7.5 | — | ||
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35516US | high7.5 | — | ||
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35515US | high7.5 | — | ||
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of… | ||||
| CVE-2019-12402US | high7.5 | — | ||
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a… | ||||
02
references
External citations — patches, advisories, analysis.
- Atlassian Security Bulletin vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan