CVE-2020-29445: Atlassian Confluence Server

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind server-side request forgery vulnerability in Team Calendars parameters.

Affected products

• Atlassian Confluence Server: before 7.4.8 (fixed in 7.4.8); from 7.5.0, before 7.11.0 (fixed in 7.11.0)

Published 2021-05-07. Last modified 2026-06-17.