VDB
BDU%3A2021-05399
BDU%3A2021-05399
PUBLISHED
CVSS 10 CRITICAL
(ДУБЛИКАТ) Уязвимость веб-сервера Atlassian Confluence Server и дата центра Confluence Data Center, связанная с некорректной обработкой выражений Object Graph Navigation Language (OGNL), позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Confluence Server, Jira Data Center |
Timeline
- Mar 12, 2018 PoC Published
- Sep 4, 2021 PoC Published
- Nov 11, 2021 CVE Published
- Jul 15, 2022 PoC Published
- Sep 16, 2022 PoC Published
- Jul 15, 2023 PoC Published
- Dec 8, 2023 PoC Published
- Mar 1, 2024 PoC Published
- Oct 8, 2024 PoC Published
- May 5, 2025 PoC Published
- May 9, 2025 PoC Published
- Aug 18, 2025 CVE Updated
References
- http://packetstormsecurity.com/files/164013/Confluence-Server-7.12.4-OGNL-Injection-Remote-Code-Execution.html url
- http://packetstormsecurity.com/files/164122/Atlassian-Confluence-WebWork-OGNL-Injection.html url
- https://jira.atlassian.com/browse/CONFSERVER-67940 url
- https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html advisory