Severity
High
Analysis Summary
CVE-2024-21683
Atlassian Confluence Data Center and Server could allow a remote authenticated attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability to cause high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.
Impact
- Gain Access
- Code Execution
Indicators of Compromise
CVE
- CVE-2024-21683
Affected Vendors
Atlassian
Affected Products
- Atlassian Confluence Server 8.0.0
- Atlassian Confluence Data Center 8.0.0
- Atlassian Confluence Data Center 8.1.0
- Atlassian Confluence Data Center 8.2.0
- Atlassian Confluence Server 8.4.0
- Atlassian Confluence Server 8.3.0
- Atlassian Confluence Server 8.2.0
- Atlassian Confluence Server 8.1.0
- Atlassian Confluence Server 8.5.0
- Atlassian Confluence Data Center 8.5.0
- Atlassian Confluence Data Center 8.4.0
- Atlassian Confluence Data Center 8.3.0
Remediation
Refer to Atlassian Security Advisory for patch, upgrade or suggested workaround information.