CVE-2021-26086
CISA 기관 조치 기한: 2024-12-03
Atlassian Jira Server and Data Center
Qualys 위협 인텔 · 심각도 3/5 · QID 150371 · Web Application
공개 익스플로잇
쉬운 악용
CISA KEV
Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint.
KEV 필수 조치: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
공개 익스플로잇 / PoC
- Exploit-DB: EDB-50380 ↗