Description

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.

Remediation

References

CVE-2021-26084

Related Vulnerabilities

CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)

WordPress Plugin Client Invoicing by Sprout Invoices-Easy Estimates and Invoices for WordPress Security Bypass (9.3)

Oracle Database Server Other Vulnerability (CVE-2007-0278)

WordPress Plugin Advance Menu Manager Security Bypass (3.0)

MySQL CVE-2020-2814 Vulnerability (CVE-2020-2814)

Severity

Critical

Classification

CVE-2021-26084 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities