Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-8978

Vulnerability against DoS attack via labels

XMLWordPrintable

      Description:
      When you give more labels to a content, then Confluence split up the user input on spaces, and then make az SQL query against each word (or something like this).

      Exploit:
      Giving x thousand characters (depends on the machine) separated by space as label results the system is breaking down.

            [CONFSERVER-8978] Vulnerability against DoS attack via labels

            Katherine Yabut made changes -
            Workflow Original: JAC Bug Workflow v3 [ 2893008 ] New: CONFSERVER Bug Workflow v4 [ 2984892 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2792599 ] New: JAC Bug Workflow v3 [ 2893008 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow [ 2722425 ] New: JAC Bug Workflow v2 [ 2792599 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2385617 ] New: JAC Bug Workflow [ 2722425 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 2281763 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2385617 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2222675 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 2281763 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2171611 ] New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2222675 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 1932968 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2171611 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v3 [ 1732779 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 1932968 ]
            Katherine Yabut made changes -
            Workflow Original: CONF Bug Subtask WF (TEMP) [ 1691367 ] New: Confluence Workflow - Public Facing - Restricted v3 [ 1732779 ]

              sleberrigaud Samuel Le Berrigaud
              b1e07ee35f09 Gergely Hodicska
              Affected customers:
              2 This affects my team
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: