CVE-2015-8399

CVE Database · CVE-2015-8399

CVE-2015-8399

· N/AModified

CVSS v3.1

N/A

EPSS

61.11%

Published

Apr 11, 2016

Modified

May 6, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBAtlassian Confluence 5.2/5.8.14/5.8.15 - Multiple Vulnerabilities NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action.

Weaknesses (CWE)

CWE-200

Affected Products (1)

atlassian · confluencevulnerable

References (4)

http://www.securityfocus.com/archive/1/537232/100/0/threaded

https://www.exploit-db.com/exploits/39170/

http://www.securityfocus.com/archive/1/537232/100/0/threaded

https://www.exploit-db.com/exploits/39170/

KEV Catalog EPSS Scores Vendors All CVEs