CVE-2020-4027 in Confluence Server

Tóm tắt

Bởi MITRE

Atlassian Confluence Server and Data Center before version 7.5.1 allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Đặt trước: 30/12/2019
• Kiểm duyệt: được chấp nhận
• mục: VDB-157560
• CPE: sẵn sàng
• CWE: CWE-74 (Đã xác nhận)
• CVSS: 4.7 (NVD)
• EPSS: 0.01515
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-4027
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-4027
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-4027/