CVE-2021-26085
CISA 기관 조치 기한: 2022-04-18
Atlassian Confluence Server
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.
KEV 필수 조치: Apply updates per vendor instructions.
공개 익스플로잇 / PoC
- GitHub 공개 PoC 1건 — 대표 레포 ↗
- Exploit-DB: EDB-50377 ↗