{"cvss":5.3,"datePublished":"2022-03-28T00:00:00Z","dateUpdated":"2022-03-28T00:00:00Z","description":"Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.","dueDate":"2022-04-18T00:00:00Z","id":"CVE-2021-26085","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Confluence Server and Data Center","requiredAction":"Apply updates per vendor instructions.","severity":"MEDIUM","source":"vulncheck_kev","title":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","vendor":"Atlassian"}