Vulnerabilities > CVE-2022-42978 - Incorrect Authorization vulnerability in Atlassian Confluence Data Center

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
atlassian
CWE-863

Summary

In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated attacker could access files on the remote system.

Common Weakness Enumeration (CWE)