Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-82403

Information disclosure of names of attachments and labels in a private Confluence space - CVE-2023-22503

XMLWordPrintable

    • 5.3
    • Medium
    • CVE-2023-22503

      Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Information Disclosure vulnerability in the macro preview feature.

      This vulnerability was reported by Rojan Rijal of the Tinder Security Engineering team.

      The affected versions are before version 7.13.15, from version 7.14.0 before 7.19.7, and from version 7.20.0 before 8.2.0.

      Affected versions:

      • version < 7.13.15
      • 7.14.0 ≤ version < 7.19.7
      • 7.20.0 ≤ version < 8.2.0

      Fixed versions:

      • 7.13.15
      • 7.19.7
      • 8.2.0

            [CONFSERVER-82403] Information disclosure of names of attachments and labels in a private Confluence space - CVE-2023-22503

            Cathy S made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 762220 ]
            AB made changes -
            CVE ID New: CVE-2023-22503
            AB made changes -
            Summary Original: Information disclosure of names of attachments and labels in a private Confluence space New: Information disclosure of names of attachments and labels in a private Confluence space - CVE-2023-22503
            Security Metrics Bot made changes -
            Labels Original: advisory advisory-to-release dont-import security 🔢✅ New: advisory advisory-to-release dont-import fixed-versions-published security 🔢✅
            AB made changes -
            Security Original: Reporter and Atlassian Staff [ 10751 ]
            Mathias Richter made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 739303 ]
            Mathias Richter made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 736629 ]
            AB made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 736438 ]
            Mathias Richter made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 735472 ]
            AB made changes -
            Security New: Reporter and Atlassian Staff [ 10751 ]

              Unassigned Unassigned
              security-metrics-bot Security Metrics Bot
              Votes:
              0 Vote for this issue
              Watchers:
              17 Start watching this issue

                Created:
                Updated:
                Resolved: