CVE-2021-26085

5.3MEDIUM

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected version

发布于: 8/3/2021更新于: 10/24/2025
在NVD查看在MITRE查看

CISA已知被利用漏洞

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

所需操作:

Apply updates per vendor instructions.

截止日期:

2022-04-18

已知勒索软件使用

描述

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.

AI分析AI驱动

受影响产品

atlassianconfluence_data_center
atlassianconfluence_data_center
atlassianconfluence_server
atlassianconfluence_server

可用漏洞利用 (1)

参考资料