CVE-2024-21683: Code Injection
Rejected reason: This CVE's publication may have been a false positive or a mistake. As a result, we have rejected this record.
Other sources
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server.
This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.
Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version. If you are unable to do so, upgrade your instance to one of the specified supported fixed versions. See the release notes https://confluence.atlassian.com/doc/confluence-release-notes-327.html
You can download the latest version of Confluence Data Center and Server from the download center https://www.atlassian.com/software/confluence/download-archives.
This vulnerability was found internally.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21683?
CVE-2024-21683 has been rejected likely indicating that it may not represent a valid vulnerability.
How do I fix CVE-2024-21683?
No fixes are necessary for CVE-2024-21683 as its publication has been rejected.
Which software is affected by CVE-2024-21683?
CVE-2024-21683 was associated with various versions of Atlassian Confluence Data Center and Server, but its validity is in question.
Where can I find more information about CVE-2024-21683?
As CVE-2024-21683 has been rejected, there may not be significant additional information available.
Is CVE-2024-21683 a confirmed vulnerability?
CVE-2024-21683 is not confirmed as a vulnerability due to its rejection as possibly a false positive.