← Back to browse · API

CVE-2021-26085

Severity
MEDIUM
CVSS
5.3
EPSS
0.99937
Risk score
81.18
CISA KEV
Yes
PoC
No
Published
2022-03-28
Modified
2022-03-28
First seen
2026-08-07
Aliases
EUVD-2021-12906, GHSA-8MJC-QHQ2-3XM8
Products
Atlassian:Confluence Data Center 7.5.0 <unspecified, Atlassian:Confluence Data Center unspecified <7.12.3, Atlassian:Confluence Data Center unspecified <7.4.10, Atlassian:Confluence Server, Atlassian:Confluence Server 7.5.0 <unspecified, Atlassian:Confluence Server unspecified <7.12.3, Atlassian:Confluence Server unspecified <7.4.10
Sources
cisa.gov CVE-2021-26085
euvd EUVD-2021-12906

Description

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

References