This vulnerability in Atlassian Confluence Data Center allows an authenticated attacker to cause a Denial of Service (DoS) by disrupting the availability of resources on a host connected to a network. It affects multiple specific versions of Confluence Data Center, including 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0. The CVSS 4.0 base score is 7.1, indicating high severity. Atlassian has provided fixed versions 9.2.17 and 10.2.7 and later to address this vulnerability. The issue was discovered via Atlassian's Penetration Testing program.

An authenticated attacker can exploit this vulnerability to cause a Denial of Service, making resources unavailable temporarily or indefinitely. This disrupts normal service operations for legitimate users of the affected Confluence Data Center instances. The impact is limited to availability and requires authentication, but the severity is high due to potential service disruption.

Atlassian recommends upgrading affected Confluence Data Center instances to fixed versions: 9.2.17 or later for the 9.2.x series, and 10.2.7 or later for the 10.2.x series. If upgrading to the latest version is not possible, applying these minimum fixed versions will mitigate the vulnerability. Patch status is confirmed by vendor advisory. No other mitigation or temporary fixes are indicated.