CVE-2021-26085 Atlassian Confluence Server
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.
- CVSS
- not scored
On CISA’s exploited list
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
- Added
- 2022-03-28
- Federal patch deadline
- 2022-04-18
- Ransomware use
- known