CVE-2021-26084
30.08.2021, 07:15
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.
| Vendor | Product | Version |
|---|---|---|
| atlassian | confluence_data_center | 𝑥 < 6.13.23 |
| atlassian | confluence_data_center | 6.14.0 ≤ 𝑥 < 7.4.11 |
| atlassian | confluence_data_center | 7.5.0 ≤ 𝑥 < 7.11.6 |
| atlassian | confluence_data_center | 7.12.0 ≤ 𝑥 < 7.12.5 |
| atlassian | confluence_server | 𝑥 < 6.13.23 |
| atlassian | confluence_server | 6.14.0 ≤ 𝑥 < 7.4.11 |
| atlassian | confluence_server | 7.5.0 ≤ 𝑥 < 7.11.6 |
| atlassian | confluence_server | 7.12.0 ≤ 𝑥 < 7.12.5 |
𝑥
= Vulnerable software versions