Back to search
CVE-2019-3395
Published: Mar 25, 2019
Modified: Sep 17, 2024
PUBLISHED
Description
The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the fixed version for 6.6.x), from version 6.7.0 before 6.8.5 (the fixed version for 6.8.x), and from version 6.9.0 before 6.9.3 (the fixed version for 6.9.x) allows remote attackers to send arbitrary HTTP and WebDAV requests from a Confluence Server or Data Center instance via Server-Side Request Forgery.
| Vendor | Product | Versions |
|---|---|---|
Atlassian | Confluence Server | affected unspecified - < 6.6.7affected 6.7.0 - < unspecifiedaffected unspecified - <= 6.7.3affected 6.8.0 - < unspecifiedaffected unspecified - < 6.8.5+2 more versions |
References
https://jira.atlassian.com/browse/CONFSERVER-57971
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now