CVE-2020-4027 Code injection in Confluence Data Center

What is CVE-2020-4027?

CVE-2020-4027 is a medium-severity code injection vulnerability in Atlassian Confluence Data Center, published on 1 Jul 2020. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

Weakness: CWE-74

Which versions are affected by CVE-2020-4027?

It affects 2 products.

Products include Atlassian Confluence, Atlassian Confluence Server.

How do I fix CVE-2020-4027?

No fix has been published for CVE-2020-4027 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2020-4027 being exploited?

There is no known exploitation of CVE-2020-4027 in the wild and no public exploit code.

Other vulnerabilities in Atlassian Confluence Data Center

• CVE-2019-3395 Server-side request forgery in Confluence Server Critical 9.8
• CVE-2019-3394 Path traversal in Confluence Server High 8.8
• CVE-2019-20406 Privilege escalation in Confluence Data Center High 7.8
• CVE-2019-15006 Other in Confluence Server Medium 6.5
• CVE-2017-18085 Cross-site scripting in Confluence Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jp4c-chxh-7gcg.