CVE-2021-26072
01.04.2021, 19:15
The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability.
Vendor | Product | Version |
---|---|---|
atlassian | confluence_data_center | 𝑥 < 5.8.6 |
atlassian | confluence_server | 𝑥 < 5.8.6 |
𝑥
= Vulnerable software versions