description: The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability.
problem types: Server Side Request Forgery (SSRF)
affected:
{
product: Confluence Server
vendor: Atlassian
versions:
lessThan: 5.8.6, status: affected, version: unspecified, versionType: custom
}
{
product: Confluence Data Center
vendor: Atlassian
versions:
lessThan: 5.8.6, status: affected, version: unspecified, versionType: custom
}
