CyberzSOC

The security advisory also addresses 10 other high severity vulnerabilities which have been fixed in new versions of several Atlassian products [2]. The vulnerability CVE-2024-21678 , with a CVSS score of 8.5, is a stored XSS vulnerability that allows an authenticated attacker to execute arbitrary HTML or JavaScript code on a victim’s browser which has a high impact to confidentiality, low impact to integrity, no impact to availability, and requires no user interaction. [1]. Among the other 10 vulnerabilities [2], 9 of them allow an unauthenticated attacker to expose assets in the environment susceptible to exploitation which might have an impact to confidentiality, integrity, or availability, and requires no user interaction. The vulnerability CVE-2024-21678 affects the following versions of Confluence Data Center, and The other 10 high severity vulnerabilities affect several products of Atlassian.