File Download Vulnerability in Atlassian Confluence User Export Add-on

CVE-2022-42977

Summary

The Netic User Export add-on for Atlassian Confluence, prior to version 1.3.5, contains a vulnerability that permits an attacker to exploit the fileName parameter during user export operations. This flaw could allow unauthorized users to generate and download files from the system, including sensitive information such as SSH private keys, thereby posing significant risks to the security and confidentiality of the application.

References