medium6.5
CVE-2023-22504
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments v…
Impact
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Confluence Server | before 7.13.17 from 7.14.0 before 7.19.9 from 7.20.0 before 8.2.2 |