EIP-2026-102359

This advisory details a path traversal vulnerability (CWE-22) in AppFusions Doxygen for Atlassian Confluence, allowing authenticated attackers to upload arbitrary files to any writable directory, potentially leading to Remote Code Execution (RCE). The vulnerability stems from improper validation of the 'tempId' parameter in the upload functionality.