CVE-2015-8399

MEDIUM NUCLEI

Atlassian Confluence <5.8.17 - Info Disclosure

Title source: llm

Description

Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.

Exploits (1)

exploitdb WRITEUP
by Sebastian Perez · textwebappsxml
https://www.exploit-db.com/exploits/39170

Nuclei Templates (1)

Atlassian Confluence <5.8.17 - Information Disclosure
MEDIUMby princechaddha
Shodan: http.component:"Atlassian Confluence" || cpe:"cpe:2.3:a:atlassian:confluence" || http.component:"atlassian confluence"

References (2)

Scores

CVSS v3 4.3
EPSS 0.9305
EPSS Percentile 99.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-200
Status draft

Affected Products (1)

atlassian/confluence < 5.8.16

Timeline

Published Apr 11, 2016
Tracked Since Feb 18, 2026