Description
Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind server-side request forgery vulnerability in Team Calendars parameters.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simple visitor stat Cross-Site Scripting (1.0)
MySQL CVE-2024-21102 Vulnerability (CVE-2024-21102)
WordPress Plugin YITH WooCommerce Multi-step Checkout Security Bypass (1.7.4)
MySQL CVE-2012-0120 Vulnerability (CVE-2012-0120)
Drupal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2017-6928)