CVE-2021-26072

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal…

published April 1, 2021

CVSS
—
EPSS
41%
Percentile
98.7
In the wild
Unconfirmed
What it is

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.41219 · 98.7th percentile
Published
2021-04-01T18:10Z
EPSS history
Timeline
  • 01 APR 18:10Z
    The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal…
    cvelistv5