VDB
BDU%3A2021-04333
BDU%3A2021-04333
PUBLISHED
CVSS 10 CRITICAL
Уязвимость веб-сервера Atlassian Confluence Server и дата центра Confluence Data Center, связанная с недостатками процедуры нейтрализации особых элементов в выходных данных, используемых входящим компонентом, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Confluence Server, Jira Data Center |
Timeline
- Mar 12, 2018 PoC Published
- Sep 2, 2021 CVE Published
- Sep 4, 2021 PoC Published
- Jul 15, 2022 PoC Published
- Sep 16, 2022 PoC Published
- Jul 15, 2023 PoC Published
- Dec 8, 2023 PoC Published
- Mar 1, 2024 PoC Published
- Oct 8, 2024 PoC Published
- May 5, 2025 PoC Published
- May 9, 2025 PoC Published
- Aug 18, 2025 CVE Updated
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-26084#range-6898374 url
- https://jira.atlassian.com/browse/CONFSERVER-67940 url
- https://github.com/projectdiscovery/nuclei-templates/pull/2529/files url
- https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html url
- https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md url
- http://packetstormsecurity.com/files/167449/Atlassian-Confluence-Namespace-OGNL-Injection.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url