CVE-2021-26072

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability.

Score

CVSS 3.1 4.3 Medium

Status

Modified - security@atlassian.com

Published

2021-04-01

Last modified

2024-09-17

Weaknesses

CWE-918

Affected products

• Confluence Data Center (Atlassian)
• Confluence Server (Atlassian)

References

• https://jira.atlassian.com/browse/CONFSERVER-61399