CVE-2023-22504 (published 2023-05-25T14:00:02.234Z)
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature.
Affected products: Vendor: Atlassian
Product: Confluence Data Center
Versions: < 1.1.2, >= 1.1.2, >= 7.14.0, >= 7.20.0, >= 7.13.7, >= 7.19.9, >= 8.2.2, >= 8.3.0