Atlassian Confluence Information Disclosure Vulnerability CVE-2017-7415
- CVSSv3 Score
- Vulnerability description
Atlassian Confluence is prone to an information disclosure vulnerability.
- Risk description
The Confluence drafts diff rest resource made the current content of all blogs and pages in Confluence available without authentication by providing a page id or draft id. Attackers who can access the Confluence web interface of a vulnerable version can use this vulnerability to obtain the content of all blogs and pages inside Confluence provided that they first enumerate page or draft ids.
Update to version 6.0.7 or later versions.
- Not available