Atlassian Confluence configuration files read

Description

Atlassian Confluence is a team workspace where knowledge and Collaboration meet. It gives your team a place to create, capture, and collaborate on any idea or project.

Atlassian Confluence until versions 5.8.17 is vulnerable to Insecure Direct Object. It allows authenticated users to read configuration files remotely via the decoratorName parameter to spaces/viewdefaultdecorator.action or admin/viewdefaultdecorator.action

Recommendation

• Don’t run Atlassian run Confluence as root/Administrator

• Block all URLs that match the pattern using proxy

• Update Atlassian Confluence the latest version

Written by

Febna V M

Cyber Security Engineer

Febna once spent an entire evening arguing with an AI chatbot just to prove that machines can be confidently wrong. The debate ended with no clear winner, but it did spark her curiosity for the fascinating world of artificial intelligence. Today, she works at the intersection of AI and cybersecurity, helping build smarter systems while making sure they don’t become too smart for their own good. When she’s not exploring the future of technology, she’s probably asking “but what if?” one more time.