medium4.3
CVE-2021-26072
The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal …
Impact
The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Confluence Data Center | before 5.8.6 |
| Atlassian | Confluence Server | before 5.8.6 |