Atlassian Confluence Remote Code Execution Vulnerability (CVE-2021-26084) Threat Alert

outubro 4, 2021

Overview Recently, NSFOCUS CERT found that Atlassian released a security bulletin to announce the fix of the Confluence Server Webwork OGNL Injection Vulnerability (CVE-2021-26084). This vulnerability allows an authenticated attacker, and in some instances, an unauthenticated user, to execute arbitrary code on Confluence Server or Data Center by injecting a crafted OGNL expression. This vulnerability […]


Inscreva-se no Blog da NSFOCUS