Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-83218

A user with read permissions to a Confluence page is able to upload attachments - CVE-2023-22504

XMLWordPrintable

    • 4.3
    • Medium
    • CVE-2023-22504

      Affected versions of Atlassian Confluence Server and Data Center allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.

      The affected versions are before version 7.13.17, from version 7.14.0 before 7.19.9, and from version 7.20.0 before 8.2.2.

      This vulnerability was discovered by Rojan Rijal of the Tinder Security Engineering Team.

      Affected versions:

      • version < 7.13.17
      • 7.14.0 ≤ version < 7.19.9
      • 7.20.0 ≤ version < 8.2.2

      Fixed versions:

      • 7.13.17
      • 7.19.9
      • 8.2.2
      • 8.3.0

            [CONFSERVER-83218] A user with read permissions to a Confluence page is able to upload attachments - CVE-2023-22504

            AB added a comment -

            ddb136f454b4 Yes, it's reflected in the attachment's version history as per a normal update.

            AB added a comment - ddb136f454b4 Yes, it's reflected in the attachment's version history as per a normal update.

            Oleksiy Brushkovskyy added a comment -

            Would it be reflected in the attachment's version history?

            Oleksiy Brushkovskyy added a comment - Would it be reflected in the attachment's version history?

            AB added a comment -

            50e16252c2f5 Yes, that's correct. I've updated the ticket description to confirm this.

            AB added a comment - 50e16252c2f5 Yes, that's correct. I've updated the ticket description to confirm this.
            AB made changes -
            Assignee New: AB [ ablack@atlassian.com ]
            AB made changes -
            Description Original: Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.

            The affected versions are before version 7.13.17, from version 7.14.0 before 7.19.9, and from version 7.20.0 before 8.2.2.

            This vulnerability was discovered by Rojan Rijal of the Tinder Security Engineering Team.

            *Affected versions:*
             * version < 7.13.17
             * 7.14.0 ≤ version < 7.19.9
             * 7.20.0 ≤ version < 8.2.2

            *Fixed versions:*
             * 7.13.17
             * 7.19.9
             * 8.2.2
             * 8.3.0             		New: Affected versions of Atlassian Confluence Server and Data Center allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.

            The affected versions are before version 7.13.17, from version 7.14.0 before 7.19.9, and from version 7.20.0 before 8.2.2.

            This vulnerability was discovered by Rojan Rijal of the Tinder Security Engineering Team.

            *Affected versions:*
             * version < 7.13.17
             * 7.14.0 ≤ version < 7.19.9
             * 7.20.0 ≤ version < 8.2.2

            *Fixed versions:*
             * 7.13.17
             * 7.19.9
             * 8.2.2
             * 8.3.0
            Ryoji Takata (Inactive) made changes -
            Remote Link New: This issue links to "CSP-316627 (Atlassian Support System)" [ 773011 ]
            Security Metrics Bot made changes -
            CVE ID New: CVE-2023-22504

            William W added a comment -

            I assume because this is listed under Confluence "Server" it applies to both Data Center and Server? Can you please confirm?

            William W added a comment - I assume because this is listed under Confluence "Server" it applies to both Data Center and Server? Can you please confirm?
            AB made changes -
            Summary Original: A user with read permissions to a Confluence page is able to upload attachments New: A user with read permissions to a Confluence page is able to upload attachments - CVE-2023-22504
            AB made changes -
            Description Original: Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.

            The affected versions are before version 7.19.9.

            This vulnerability was discovered by Rojan Rijal of the Tinder Security Engineering Team.

            *Affected versions:*
             * version < 7.19.9

            *Fixed versions:*
             * 7.19.9             		New: Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.

            The affected versions are before version 7.13.17, from version 7.14.0 before 7.19.9, and from version 7.20.0 before 8.2.2.

            This vulnerability was discovered by Rojan Rijal of the Tinder Security Engineering Team.

            *Affected versions:*
             * version < 7.13.17
             * 7.14.0 ≤ version < 7.19.9
             * 7.20.0 ≤ version < 8.2.2

            *Fixed versions:*
             * 7.13.17
             * 7.19.9
             * 8.2.2
             * 8.3.0

              ablack@atlassian.com AB
              security-metrics-bot Security Metrics Bot
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: