Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-82436

Information disclosure via Synchrony service

XMLWordPrintable

    • 6.5
    • Medium

      Affected versions of Atlassian Confluence Server allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the Synchrony service.

      This vulnerability was discovered by Rojan Rijal of Tinder Security Engineering.

      The affected versions are before version 7.13.14, from version 7.14.0 before 7.19.6, and from version 7.20.0 before 8.1.0.

      Affected versions:

      • version < 7.13.14
      • 7.14.0 ≀ version < 7.19.6
      • 7.20.0 ≀ version < 8.1.0

      Fixed versions:

      • 7.13.14
      • 7.19.6
      • 8.1.0

              Unassigned Unassigned
              security-metrics-bot Security Metrics Bot
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: