| Package | Affected versions | Patched versions |
|---|---|---|
| confluence server | ≥ 7.14.0, < 7.19.9≥ 7.20.0, < 8.2.2< 7.13.17 | 7.19.98.2.27.13.17 |
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free