WID-SEC-W-2025-1344

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Atlassian Confluence: Mehrere Schwachstellen

view advisory published 2025-06-17

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Atlassian Confluence ausnutzen, um einen Denial of Service Angriff durchzuführen und die Authentisierung zu umgehen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-22228US——
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
CVE-2024-57699US——
A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigg…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan