confluence

Security Findings (104)

• HighAS-002

  ⚠️Excessive Permissions ×7

  tool declares exec permission

  CONFLUENCE_CREATE_PRIVATE_SPACECONFLUENCE_CREATE_SPACE

  tool declares network permission

  CONFLUENCE_GET_ATTACHMENT_LABELSCONFLUENCE_GET_AUDIT_LOGSCONFLUENCE_SEARCH_CONTENTCONFLUENCE_SEARCH_USERSCONFLUENCE_UPDATE_SPACE_PROPERTY

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• MediumAS-002

  ⚠️Excessive Permissions ×23

  tool declares fs permission

  CONFLUENCE_CREATE_BLOGPOSTCONFLUENCE_CREATE_BLOGPOST_PROPERTYCONFLUENCE_CREATE_CONTENT_PROPERTY_FOR_WHITEBOARDCONFLUENCE_CREATE_PAGECONFLUENCE_CREATE_PAGE_PROPERTYCONFLUENCE_CREATE_PRIVATE_SPACECONFLUENCE_CREATE_SPACECONFLUENCE_CREATE_SPACE_PROPERTYCONFLUENCE_CREATE_WHITEBOARDCONFLUENCE_DELETE_BLOGPOST_PROPERTYCONFLUENCE_DELETE_CONTENT_PROPERTY_FOR_PAGE_BY_IDCONFLUENCE_DELETE_CONTENT_PROPERTY_FOR_WHITEBOARD_BY_IDCONFLUENCE_DELETE_PAGECONFLUENCE_DELETE_SPACECONFLUENCE_DELETE_SPACE_PROPERTYCONFLUENCE_UPDATE_BLOGPOSTCONFLUENCE_UPDATE_BLOGPOST_PROPERTYCONFLUENCE_UPDATE_CONTENT_PROPERTY_FOR_PAGE_BY_IDCONFLUENCE_UPDATE_CONTENT_PROPERTY_FOR_WHITEBOARD_BY_IDCONFLUENCE_UPDATE_PAGECONFLUENCE_UPDATE_SPACE_PROPERTY

  tool declares db permission

  CONFLUENCE_SEARCH_CONTENTCONFLUENCE_SEARCH_USERS

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-002

  ⚠️Excessive Permissions ×6

  tool declares http permission

  CONFLUENCE_CREATE_BLOGPOSTCONFLUENCE_CREATE_PAGECONFLUENCE_GET_CONTENT_RESTRICTIONSCONFLUENCE_GET_PAGESCONFLUENCE_UPDATE_BLOGPOSTCONFLUENCE_UPDATE_PAGE

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×13

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  CONFLUENCE_CREATE_BLOGPOSTCONFLUENCE_CREATE_PAGECONFLUENCE_CREATE_PRIVATE_SPACECONFLUENCE_CREATE_SPACECONFLUENCE_GET_ATTACHMENT_LABELSCONFLUENCE_GET_AUDIT_LOGSCONFLUENCE_GET_CONTENT_RESTRICTIONSCONFLUENCE_GET_PAGESCONFLUENCE_SEARCH_CONTENTCONFLUENCE_SEARCH_USERSCONFLUENCE_UPDATE_BLOGPOSTCONFLUENCE_UPDATE_PAGECONFLUENCE_UPDATE_SPACE_PROPERTY

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×55

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  CONFLUENCE_ADD_CONTENT_LABELCONFLUENCE_CREATE_BLOGPOSTCONFLUENCE_CREATE_BLOGPOST_PROPERTYCONFLUENCE_CREATE_CONTENT_PROPERTY_FOR_WHITEBOARDCONFLUENCE_CREATE_PAGECONFLUENCE_CREATE_PAGE_PROPERTYCONFLUENCE_CREATE_PRIVATE_SPACECONFLUENCE_CREATE_SPACECONFLUENCE_CREATE_SPACE_PROPERTYCONFLUENCE_CREATE_WHITEBOARDCONFLUENCE_DELETE_BLOGPOST_PROPERTYCONFLUENCE_DELETE_CONTENT_PROPERTY_FOR_PAGE_BY_IDCONFLUENCE_DELETE_CONTENT_PROPERTY_FOR_WHITEBOARD_BY_IDCONFLUENCE_DELETE_PAGECONFLUENCE_DELETE_SPACECONFLUENCE_DELETE_SPACE_PROPERTYCONFLUENCE_GET_ATTACHMENT_LABELSCONFLUENCE_GET_ATTACHMENTSCONFLUENCE_GET_AUDIT_LOGSCONFLUENCE_GET_BLOGPOST_BY_IDCONFLUENCE_GET_BLOGPOST_LABELSCONFLUENCE_GET_BLOGPOST_LIKE_COUNTCONFLUENCE_GET_BLOGPOST_OPERATIONSCONFLUENCE_GET_BLOG_POSTSCONFLUENCE_GET_BLOG_POSTS_FOR_LABELCONFLUENCE_GET_BLOGPOST_VERSION_DETAILSCONFLUENCE_GET_BLOGPOST_VERSIONSCONFLUENCE_GET_CHILD_PAGESCONFLUENCE_GET_CONTENT_PROPERTIES_FOR_BLOG_POSTCONFLUENCE_GET_CONTENT_PROPERTIES_FOR_PAGECONFLUENCE_GET_CONTENT_RESTRICTIONSCONFLUENCE_GET_CURRENT_USERCONFLUENCE_GET_INLINE_COMMENTS_FOR_BLOG_POSTCONFLUENCE_GET_LABELSCONFLUENCE_GET_LABELS_FOR_PAGECONFLUENCE_GET_LABELS_FOR_SPACECONFLUENCE_GET_LABELS_FOR_SPACE_CONTENTCONFLUENCE_GET_PAGE_ANCESTORSCONFLUENCE_GET_PAGE_BY_IDCONFLUENCE_GET_PAGE_LIKE_COUNTCONFLUENCE_GET_PAGESCONFLUENCE_GET_PAGE_VERSIONSCONFLUENCE_GET_SPACE_BY_IDCONFLUENCE_GET_SPACE_CONTENTSCONFLUENCE_GET_SPACE_PROPERTIESCONFLUENCE_GET_SPACESCONFLUENCE_GET_USER_ANONYMOUSCONFLUENCE_SEARCH_CONTENTCONFLUENCE_SEARCH_USERSCONFLUENCE_UPDATE_BLOGPOSTCONFLUENCE_UPDATE_BLOGPOST_PROPERTYCONFLUENCE_UPDATE_CONTENT_PROPERTY_FOR_PAGE_BY_IDCONFLUENCE_UPDATE_CONTENT_PROPERTY_FOR_WHITEBOARD_BY_IDCONFLUENCE_UPDATE_PAGECONFLUENCE_UPDATE_SPACE_PROPERTY

  Fix: Review and remediate the identified issue.