CVE-2021-26085

5.3MEDIUM

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected version

Опубликовано: 8/3/2021Обновлено: 10/24/2025
Посмотреть на NVDПосмотреть на MITRE

Известная эксплуатируемая уязвимость CISA

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

Требуемое действие:

Apply updates per vendor instructions.

Срок:

2022-04-18

Известное использование вымогателей

Описание

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

ИИ-АнализНа базе ИИ

Затронутые продукты

atlassianconfluence_data_center
atlassianconfluence_data_center
atlassianconfluence_server
atlassianconfluence_server

Доступные эксплойты (1)

Ссылки