We couldn't load all Actvitity tabs. Refresh the page to try again.
If the problem persists, contact your Jira admin.
IMPORTANT: JAC is a Public system and anyone on the internet will be able to view the data in the created JAC tickets. Please don’t include Customer or Sensitive data in the JAC ticket.
Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-59898

Velocity Template Injection in Custom user macros - Macros Platform - CVE-2020-4027

XMLWordPrintable

      Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros.

      This issue was discovered and reported by GHSL team member @pwntester (Alvaro Munoz).

      The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

       

      Affected versions:

      • version < 7.4.5
      • 7.5.0 ≤ version < 7.5.1

      Fixed versions:

      • 7.4.5
      • 7.5.1  

            Loading...
            IMPORTANT: JAC is a Public system and anyone on the internet will be able to view the data in the created JAC tickets. Please don’t include Customer or Sensitive data in the JAC ticket.
            Uploaded image for project: 'Confluence Data Center'
            1. Confluence Data Center
            2. CONFSERVER-59898

            Velocity Template Injection in Custom user macros - Macros Platform - CVE-2020-4027

            XMLWordPrintable

                Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros.

                This issue was discovered and reported by GHSL team member @pwntester (Alvaro Munoz).

                The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

                 

                Affected versions:

                • version < 7.4.5
                • 7.5.0 ≤ version < 7.5.1

                Fixed versions:

                • 7.4.5
                • 7.5.1  

                        ggautam Ganesh Gautam
                        security-metrics-bot Security Metrics Bot
                        Votes:
                        0 Vote for this issue
                        Watchers:
                        24 Start watching this issue

                          Created:
                          Updated:
                          Resolved:

                            ggautam Ganesh Gautam
                            security-metrics-bot Security Metrics Bot
                            Affected customers:
                            0 This affects my team
                            Watchers:
                            24 Start watching this issue

                              Created:
                              Updated:
                              Resolved: