VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Jul 1, 2020· Updated Jun 17, 2026

CVE-2020-4027

CVE-2020-4027

Description

Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Atlassian/Confluence Data Centerllm-fuzzy2 versions
    <7.4.5, >=7.5.0 <7.5.1+ 1 more
    • (no CPE)range: <7.4.5, >=7.5.0 <7.5.1
    • (no CPE)range: unspecified
  • Atlassian/Confluencecpe-rescue3 versions
    unspecified+ 2 more
    • (no CPE)range: unspecified
    • cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*range: <7.4.5
    • cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*range: >=7.5.0,<7.5.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.