CVE-2021-26085

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-28

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-26085

⌖ exploited in the wild shame 80/100 ransomwareexploited-in-wild

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

Players implicated

Atlassian · vendor Confluence Server · product

Description

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.