PT-2022-26689 · Atlassian · Confluence+1

Published 2022-11-15 · Updated 2023-08-08 · CVE-2022-42977

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netic User Export add-on for Atlassian Confluence versions prior to 1.3.5

Description The issue allows an HTTP request to download any file on the system, including sensitive files like SSH private keys, due to the fileName parameter accepting any file. This is related to the functionality of generating and exporting a list of users in the application.

Recommendations For versions prior to 1.3.5, update to version 1.3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the export functionality to minimize the risk of exploitation. Avoid using the fileName parameter in the affected HTTP request until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-42977

Affected Products

Confluence

Netic User Export

References · 5

• 🔥 https://gist.github.com/CveCt0r/34251664a511f1045ce6a5492e94eec1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-42977 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42977 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42977 · Security Note
• https://t.me/cvenotify/37708 · Telegram Post