[%22Issue] Download a deleted page via word export - CVE-2018-20237 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 6.14.0, 6.13.1
Affects Version/s: 6.12.0
Component/s: Page - Export / Import
Labels:
- advisory
- advisory-released
- bugbounty
- cve-2018-20237
- cvss-low
- idor
- scale-team
- security

Fixed in Long Term Support Release/s:

Download 6.13
Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

Atlassian Confluence Server from version 6.12.0 (or earlier), and before version 6.13.1, or before version 6.14.0 allows an authenticated user to download a deleted page via the word export feature.

Assignee:: Matt Hart (Inactive)

Reporter:: CERT-XLM

Affected customers:: 0 This affects my team

Watchers:: 3 Start watching this issue

Created:: 29/Jan/2019 1:26 AM

Updated:: 22/May/2020 8:22 AM

Resolved:: 29/Jan/2019 1:27 AM

Details

Description

Attachments

Forms

Activity

[CONFSERVER-57814] Download a deleted page via word export - CVE-2018-20237

People

Dates