The host is installed with Atlassian Confluence Server before 7.4.8 or 7.5.x before 7.11.0 and is prone to a blind server-side request forgery vulnerability. A flaw is present in the application which fails to properly handle team calendars parameters. Successful exploitation allows remote attackers to identify internal hosts and ports.