DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Atlassian Confluence: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-07-16
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Atlassian Confluence ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, einen Cross-Stite-Scripting-Angriff oder einen unspezifischen Angriff durchzuführen.
01
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-21688US | — | — | ||
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. | ||||
| CVE-2024-21686US | high8.7 | — | ||
This High severity Stored XSS vulnerability was introduced in versions 7.13 of Confluence Data Center and Server.
This Stored XSS vulnerability, with a CVSS Score of 7.3, allows a… | ||||
| CVE-2021-36090US | high7.5 | — | ||
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35517US | high7.5 | — | ||
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35516US | high7.5 | — | ||
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35515US | high7.5 | — | ||
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of… | ||||
| CVE-2019-12402US | high7.5 | — | ||
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Atlassian Security Bulletin vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
- Confluence Public Security Vulnerability vom 2024-07-16external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan