Description
Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Add Mime Types Cross-Site Request Forgery (2.2.1)
Moodle Other Vulnerability (CVE-2011-4586)
MySQL CVE-2018-2767 Vulnerability (CVE-2018-2767)
Drupal Core 4.6.x Cross-Site Scripting (4.6.0 - 4.6.5)
WordPress Plugin VDZ VERIFICATION (Custom Meta Tags) Cross-Site Scripting (1.3.12)