Security Advisory

CVE-2021-26084

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-30 06:30:14
Last updated 2025-12-16 18:04:05
Assigner atlassian
CVSS score not scored
State PUBLISHED

Description

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.