https://jira.atlassian.com/browse/CONFSERVER-95832
https://confluence.atlassian.com/doc/confluence-release-notes-327.html
https://www.atlassian.com/software/confluence/download-archives
Severity: High
ID: 197898
File Name: confluence_confserver-95832.nasl
Version: 1.7
Type: combined
Agent: windows, macosx, unix
Family: CGI abuses
Published: 5/24/2024
Updated: 7/12/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Enable CGI Scanning: true
Risk Factor: Critical
Score: 9.2
Risk Factor: High
Base Score: 9
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2024-21683
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.2
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CPE: cpe:/a:atlassian:confluence
Required KB Items: installed_sw/Atlassian Confluence
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/8/2024
Vulnerability Publication Date: 5/15/2024
Metasploit (Atlassian Confluence Administrator Code Macro Remote Code Execution)
CVE: CVE-2024-21683
IAVA: 2024-A-0305-S, 2024-A-0366