← Back to browse · API

CVE-2021-26086

Severity
MEDIUM
CVSS
5.3
EPSS
0.99999
Risk score
81.2
CISA KEV
Yes
PoC
No
Published
2024-11-12
Modified
2024-11-12
First seen
2026-08-07
Aliases
EUVD-2021-12907, GHSA-VVHJ-8W7X-QJ58
Products
Atlassian:Jira Data Center 8.14.0 <unspecified, Atlassian:Jira Data Center 8.6.0 <unspecified, Atlassian:Jira Data Center unspecified <8.13.6, Atlassian:Jira Data Center unspecified <8.16.1, Atlassian:Jira Data Center unspecified <8.5.14, Atlassian:Jira Server 8.14.0 <unspecified, Atlassian:Jira Server 8.6.0 <unspecified, Atlassian:Jira Server and Data Center, Atlassian:Jira Server unspecified <8.13.6, Atlassian:Jira Server unspecified <8.16.1, Atlassian:Jira Server unspecified <8.5.14
Sources
euvd EUVD-2021-12907
cisa.gov CVE-2021-26086

Description

Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint.

References