High severity7.5NVD Advisory· Published Nov 15, 2022· Updated Jun 17, 2026

CVE-2022-42978

Description

In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated attacker could access files on the remote system.

Affected products

Atlassian/Confluence Data Center
cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*
Range: <1.3.5
Netic/User Export add-ondescription
Netic/User Exportllm-fuzzy
Range: <1.3.5
Atlassian/Confluencellm-fuzzy
Range: <1.3.5

Patches

Vulnerability mechanics

References

gist.github.com/CveCt0r/34251664a511f1045ce6a5492e94eec1nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000