CVE-2015-8399

Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1)…

published April 11, 2016

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
60%
Percentile
99.1
In the wild
Unconfirmed
What it is

Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.60241 · 99.1th percentile
Published
2016-04-11T21:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 60% → 27%
    epss
  • 06 SEP 03:08Z
    EPSS moved 60% → 27%
    epss
  • 30 AUG 15:29Z
    EPSS moved 28% → 60%
    epss
  • 29 AUG 04:06Z
    EPSS moved 61% → 28%
    epss
  • 11 APR 21:00Z
    Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1)…
    cvelistv5