Atlassian Confluence configuration files read

Febna V M

Published on

10 Jan 2022

Vulnerability

Description

Atlassian Confluence is a team workspace where knowledge and Collaboration meet. It gives your team a place to create, capture, and collaborate on any idea or project.

Atlassian Confluence until versions 5.8.17 is vulnerable to Insecure Direct Object. It allows authenticated users to read configuration files remotely via the decoratorName parameter to spaces/viewdefaultdecorator.action or admin/viewdefaultdecorator.action

Recommendation

Don’t run Atlassian run Confluence as root/Administrator
Block all URLs that match the pattern using proxy
Update Atlassian Confluence the latest version

Automated human-like penetration testing for your web apps & APIs

Teams using Beagle Security are set up in minutes, embrace release-based CI/CD security testing and save up to 65% with timely remediation of vulnerabilities. Sign up for a free account to see what it can do for you.

Product tour

Written by