Total vulnerabilities in the database
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.
| Software | From | Fixed in |
|---|---|---|
| atlassian / confluence_server | 7.20.0 | 8.2.2 |
| atlassian / confluence_server | 7.14.0 | 7.19.9 |
| atlassian / confluence_server | - | 7.13.17 |