Read the docs
TI-2020-03518 Aliases CVE-2020-4027GHSA-jp4c-chxh-7gcg

Injection in Atlassian Confluence Server

Priority LOW 25CWE-74Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

Why it matters now

EPSS 0.01515 74th percentileScored 2026-11-07
Fix Fixed Confluence Server (Atlassian): 7.4.5, 7.5.1Confluence Data Center (Atlassian): 7.4.5, 7.5.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AtlassianConfluence Serverbefore 7.4.5; 7.5.0 and later; before 7.5.17.4.5, 7.5.1Patch availableCNA
AtlassianConfluence Data Centerbefore 7.4.5; 7.5.0 and later; before 7.5.17.4.5, 7.5.1Patch availableCNA
  • Confluence Server VendorAtlassian Affected before 7.4.5; 7.5.0 and later; before 7.5.1 Fixed in 7.4.5, 7.5.1 Patch available CNA
  • Confluence Data Center VendorAtlassian Affected before 7.4.5; 7.5.0 and later; before 7.5.1 Fixed in 7.4.5, 7.5.1 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*before 7.4.5VulnerableAtlassian
cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*7.5.0 to before 7.5.1VulnerableAtlassian
  • cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:* Versions before 7.4.5 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* Versions 7.5.0 to before 7.5.1 Vulnerable ·Atlassian

Remediation

  • Fix · CNA Confluence Server (Atlassian) Fixed in 7.4.5, 7.5.1
  • Fix · CNA Confluence Data Center (Atlassian) Fixed in 7.4.5, 7.5.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-4027
  2. 2026-10-03 Alias added: GHSA-jp4c-chxh-7gcg

References

Patch 1

  • TI-2012-02540 Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before… CVSS 3.1CRITICAL 9.1
  • TI-2015-06919 Atlassian Confluence before 5.8.17 allows remote authenticated users to read… CVSS 3.0MEDIUM 4.3
  • TI-2019-02553 Server-side request forgery in Atlassian Confluence Server CVSS 3.0CRITICAL 9.8
  • TI-2019-02552 Path traversal in Atlassian Confluence Server CVSS 3.0HIGH 8.8
  • TI-2019-14640 Uncontrolled search path in Atlassian Confluence Data Center CVSS 3.1HIGH 7.8
  • TI-2019-11192 There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews… CVSS 3.1MEDIUM 6.5
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences