CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-08-16
Atlassian Jira Server and Data Center Path Traversal Information Disclosure Vulnerability (CVE-2021-26086) Security Advisory
[Affected Scope] Atlassian Jira Server and Data Center versions before 8.5.14, 8.6.0 before 8.13.6, and 8.14.0 before 8.16.1
[Impact] Unauthenticated remote attackers can exploit a path traversal vulnerability to read sensitive configuration files, such as '/WEB-INF/web.xml'
[Mitigation] Immediately upgrade Jira instances to the patched versions (8.5.14, 8.13.6, 8.16.1, or later) and apply WAF access control rules