CVE-2024-21683
100Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 7.2epss 88%
de la publicación al arma2 días
Publicada en NVD21 may
1ª PoC+2d
metasploit21 may
VulnCheck+2d
probabilidad de explotación
88%top 1% de las CVE
explotación observada
síVulnCheck
5 exploit(s) público(s)
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server.
This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.
Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version. If you are unable to do so, upgrade your instance to one of the specified supported fixed versions. See the release notes https://confluence.atlassian.com/doc/confluence-release-notes-327.html
You can download the latest version of Confluence Data Center and Server from the download center https://www.atlassian.com/software/confluence/download-archives.
This vulnerability was found internally.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Atlassian · Confluence Data CenterPoCs públicas encontradas — 5
vulncheckvulncheck.com/xdb/9c6e3d7ac91fno verificadovulncheckvulncheck.com/xdb/5d69fe716ed6no verificadovulncheckvulncheck.com/xdb/29a71df0392dno verificadovulncheckvulncheck.com/xdb/c7630af4a6cano verificadovulncheckvulncheck.com/xdb/113e10e61fc1no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.