CVE-2018-20237

CVE-2018-20237: vulnerability in Atlassian Confluence Server

Published 13 Feb 2019 · Updated 16 Sep 2024

Follow this CVE + Monitor Confluence Server + Monitor Confluence Data Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%

Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word export feature.

Affected products

Atlassian · Confluence Data Center Atlassian · Confluence Server

Related CVEs — Atlassian Confluence Server

In the same product, most dangerous first.

CVE-2023-22518CRITICALCVE-2023-22518EPSS 100.0%KEV CVE-2022-26134CRITICALCVE-2022-26134EPSS 100.0%KEV CVE-2021-26084CRITICALCVE-2021-26084EPSS 100.0%KEV CVE-2023-22527CRITICALCVE-2023-22527EPSS 100.0%KEV CVE-2021-26085MEDIUMCVE-2021-26085EPSS 99.9%KEV CVE-2019-3396CRITICALCVE-2019-3396EPSS 99.9%KEV

References

https://jira.atlassian.com/browse/CONFSERVER-57814 https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20237/http://www.securityfocus.com/bid/107041