| Package | Affected versions | Patched versions |
|---|---|---|
| confluence server | ≥ 7.5.0, < 7.11.0< 7.4.8 | 7.11.07.4.8 |
Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind server-side request forgery vulnerability in Team Calendars parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free