According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.6.13, 6.7.x prior to 6.12.4, 6.13.x prior to 6.13.4, 6.14.x prior to 6.14.3 or 6.15.x prior to 6.15.2. It is, therefore, affected by a directory traversal vulnerability which exists in download all attachments component. An authenticated, remote attacker can exploit this, by sending a URI that contains directory traversal characters, to write files to arbitrary locations which may lead to remote code execution.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.6.13, 6.7.x prior to 6.12.4, 6.13.x prior to 6.13.4, 6.14.x prior to 6.14.3 or 6.15.x prior to 6.15.2. It is, therefore, affected by a directory traversal vulnerability which exists in download all attachments component. An authenticated, remote attacker can exploit this, by sending a URI that contains directory traversal characters, to write files to arbitrary locations which may lead to remote code execution. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
98634	Atlassian Confluence 6.14.x < 6.14.3 Directory Traversal Vulnerability	Web App Scanning	Component Vulnerability	7/17/2019	3/14/2023	high
98635	Atlassian Confluence 6.13.x < 6.13.4 Directory Traversal Vulnerability	Web App Scanning	Component Vulnerability	7/17/2019	3/14/2023	high
98636	Atlassian Confluence 6.7.x < 6.12.4 Directory Traversal Vulnerability	Web App Scanning	Component Vulnerability	7/17/2019	3/14/2023	high
98633	Atlassian Confluence 6.15.x < 6.15.2 Directory Traversal Vulnerability	Web App Scanning	Component Vulnerability	7/17/2019	3/14/2023	high
98637	Atlassian Confluence < 6.6.13 Directory Traversal Vulnerability	Web App Scanning	Component Vulnerability	7/17/2019	3/14/2023	high
124281	Atlassian Confluence < 6.6.13 / 6.7.x < 6.12.4 / 6.13.x < 6.13.4 / 6.14.x < 6.14.3 / 6.15.x < 6.15.2 Directory Traversal Vulnerability	Nessus	CGI abuses	4/25/2019	6/5/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high