Em resumo
- CVE-2024-21683 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta confluence data center (atlassian), confluence server (atlassian), crucible (atlassian).
- Chance de exploração nos próximos 30 dias (EPSS): 88.3%, maior que 99.8% das vulnerabilidades.
- Correção: atualize para 7.19.24, 8.5.11, 8.9.3, 4.8.15 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| confluence data center | = 8.7.1= 8.7.2= 8.8.0= 8.8.1≥ 7.19.0, < 7.19.24≥ 7.20.0, ≤ 7.20.3≥ 8.0.0, ≤ 8.0.4≥ 8.1.0, ≤ 8.1.4≥ 8.2.0, ≤ 8.2.3≥ 8.3.0, ≤ 8.3.4≥ 8.4.0, ≤ 8.4.5≥ 8.5.0, < 8.5.11≥ 8.6.0, ≤ 8.6.2≥ 8.9.0, < 8.9.3
| 7.19.248.5.118.9.3
|
| confluence server | = 8.7.1= 8.7.2= 8.8.0= 8.8.1≥ 7.19.0, < 7.19.24≥ 7.20.0, ≤ 7.20.3≥ 8.0.0, ≤ 8.0.4≥ 8.1.0, ≤ 8.1.4≥ 8.2.0, ≤ 8.2.3≥ 8.3.0, ≤ 8.3.4≥ 8.4.0, ≤ 8.4.5≥ 8.5.0, < 8.5.11≥ 8.6.0, ≤ 8.6.2≥ 8.9.0, ≤ 8.9.2
| 7.19.248.5.11
|
| crucible | ≥ 4.8.0, < 4.8.15
| 4.8.15
|
| fisheye | ≥ 4.8.0, < 4.8.15
| 4.8.15
|
| jira data center |
Description
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server.
This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.
Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version. If you are unable to do so, upgrade your instance to one of the specified supported fixed versions. See the release notes https://confluence.atlassian.com/doc/confluence-release-notes-327.html
You can download the latest version of Confluence Data Center and Server from the download center https://www.atlassian.com/software/confluence/download-archives.
This vulnerability was found internally.
Mais vulnerabilidades de confluence data center
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free