Security readout for executives and security teams
Plain-English summary
This flaw lets a logged-in attacker use vulnerable Confluence Server Team Calendars handling to probe internal hosts and ports. The direct impact is information exposure, not data modification or service outage. Business urgency is moderate for internet-facing or broadly accessible Confluence systems because internal network mapping can support later attacks.
Executive priority
Treat as a moderate-priority remediation item. It is not listed as known exploited in the provided sources, but affected Confluence systems can disclose internal network information to authenticated attackers.
Technical view
CVE-2020-29445 is a blind SSRF in Atlassian Confluence Server Team Calendars parameters. Affected ranges are before 7.4.8 and 7.5.0 before 7.11.0. CVSS 3.1 is 4.3 with network access, low complexity, low privileges, no user interaction, and low confidentiality impact.
Likely exposure
Exposure is most likely where Atlassian Confluence Server is deployed in an affected version range and reachable by low-privileged users. The source bundle does not identify Confluence Data Center, Cloud, or other Atlassian products as affected.
Exploitation context
The provided data does not show CISA KEV listing or confirmed active exploitation. Exploitation requires low privileges and could reveal whether internal hosts and ports exist, which is useful reconnaissance but not direct code execution.
Researcher notes
Evidence is limited to the CVE record and Atlassian Jira reference. The source bundle does not provide exploit details, indicators of compromise, or named compensating controls beyond affected version boundaries.
Mitigation direction
- Upgrade Confluence Server out of the affected version ranges.
- Use Atlassian guidance for supported fixed versions and upgrade paths.
- Restrict Confluence access to trusted users and networks where feasible.
- Review Team Calendars exposure on affected Confluence Server instances.
Validation and detection
- Inventory Confluence Server versions across production and non-production systems.
- Flag versions before 7.4.8 and 7.5.0 through before 7.11.0.
- Confirm whether vulnerable systems are reachable by low-privileged users.
- Review Confluence logs for unusual Team Calendars request patterns.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-918: Information exposure and cloud metadata lookup
Information exposure and SSRF weaknesses can make discovery, cloud metadata, and credential material review relevant. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCloud metadata behavior lookup
The CVE wording references SSRF or metadata access, so cloud discovery and credential material review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2020-29445 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 4.3 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N2.81.4Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
4.3MediumVector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source materials
- CVE List V5 sourceCVE List V5
- https://jira.atlassian.com/browse/CONFSERVER-61453CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Server-Side Request Forgery (SSRF)
Server-Side Request Forgery (SSRF) represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.