Atlas conference vulnerability analysis collection

One 、 Product introduction

Atlassian Confluence Server It's Australia Atlassian A set of collaboration software server version of the company , It has the function of enterprise knowledge management , And support for building enterprises WiKi.Atlassian Confluence Data Center yes Atlassian Confluence Data center version .

Two 、 Vulnerability analysis

1.Atlassian Confluence File read vulnerability （CVE-2019-3394）

Vulnerability description

Confluence Is a professional enterprise knowledge management and collaboration software , Commonly used to build enterprises wiki. This vulnerability can be used to read arbitrary files on the server

Holes affect

6.1.0  <= version