CVE-2024-21683
100Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 7.2epss 88%
da publicação à arma2 dias
Publicada no NVD21 de mai.
1ª PoC+2d
metasploit21 de mai.
VulnCheck+2d
probabilidade de exploração
88%top 1% das CVEs
exploração observada
simVulnCheck
5 exploit(s) público(s)
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server.
This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.
Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version. If you are unable to do so, upgrade your instance to one of the specified supported fixed versions. See the release notes https://confluence.atlassian.com/doc/confluence-release-notes-327.html
You can download the latest version of Confluence Data Center and Server from the download center https://www.atlassian.com/software/confluence/download-archives.
This vulnerability was found internally.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Atlassian · Confluence Data CenterPoCs públicas encontradas — 5
vulncheckvulncheck.com/xdb/9c6e3d7ac91fnão verificadovulncheckvulncheck.com/xdb/5d69fe716ed6não verificadovulncheckvulncheck.com/xdb/29a71df0392dnão verificadovulncheckvulncheck.com/xdb/c7630af4a6canão verificadovulncheckvulncheck.com/xdb/113e10e61fc1não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.