CVE-2020-4027 in Confluence Server

Sumário

de MITRE

Atlassian Confluence Server and Data Center before version 7.5.1 allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 30/12/2019
• Moderação: aceite
• Entrada: VDB-157560
• CPE: pronto
• CWE: CWE-74 (confirmado)
• CVSS: 4.7 (NVD)
• EPSS: 0.01515
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-4027
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-4027
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-4027/