CVE-2020-29445 Server-side request forgery in Confluence Server

What is CVE-2020-29445?

CVE-2020-29445 is a medium-severity server-side request forgery vulnerability in Atlassian Confluence Server, published on 7 May 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind server-side request forgery vulnerability in Team Calendars parameters.

Weakness: CWE-918

Which versions are affected by CVE-2020-29445?

It affects 1 product.

Products include Atlassian Confluence Server.

How do I fix CVE-2020-29445?

No fix has been published for CVE-2020-29445 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2020-29445 being exploited?

There is no known exploitation of CVE-2020-29445 in the wild and no public exploit code.

Other vulnerabilities in Atlassian Confluence Server

• CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Exploited Critical 9.8
• CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Exploited High 8.8
• CVE-2017-7415 Auth bypass in n/a High 7.5
• CVE-2016-6668 Information disclosure in n/a High 7.5
• CVE-2012-6342 Cross-site request forgery in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9gqc-c5m8-vf5q.