Threat actors are actively exploiting a recently patched vulnerability in Atlassian’s Confluence enterprise collaboration product.
Threat actors were spotted exploiting the CVE-2021-26084 vulnerability in Atlassian’s Confluence enterprise collaboration product a few days after it was patched by the vendor.
The flaw is an OGNL injection issue that can be exploited by an authenticated attacker to execute arbitrary code on affected Confluence Server and Data Center instances.
“An OGNL injection vulnerability exists that would allow an authenticated user, and in some instances unauthenticated user, to execute arbitrary code on a Confluence Server or Data Center instance. ” reads the advisory published by the company.
The issue was discovered by Benny Jacob (SnowyOwl) through the Atlassian public bug bounty program, the vulnerability received a CVSS score of 9.8.
Affected versions are:
version < 126.96.36.199.0 ≤ version < 188.8.131.52.0 ≤ version < 184.108.40.206.0 ≤ version < 7.12.5
Researchers from Threat
Read the article