CVE-2022-42977

 

Published at: - 15-11-2022 02:15

Last modified: - 17-11-2022 05:52

Total changes: - 2

Description

The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system (e.g., an SSH private key) to be downloaded.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://gist.github.com/CveCt0r/34251664a511f1045ce6a5492e94eec1

 

Keywords

NVD

 

CVE-2022-42977

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures