| Package | Affected versions | Patched versions |
|---|---|---|
| confluence data center | < 5.8.6 | 5.8.6 |
| confluence server | < 5.8.6 | 5.8.6 |
The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free