medium6.5
CVE-2018-20237
Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature.
Impact
Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Confluence Data Center | before 6.13.1 from 6.13.2 before 6.14.0 |
| Atlassian | Confluence Server | before 6.13.1 from 6.13.2 before 6.14.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/107041
- https://jira.atlassian.com/browse/CONFSERVER-57814
- https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20237/
- http://www.securityfocus.com/bid/107041
- https://jira.atlassian.com/browse/CONFSERVER-57814
- https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20237/