CVE-2021-26084: Atlassian Confluence Server 및 Data Center Object-Graph Navigation Language (OGNL) 인젝션 취약점

Source: Dev.to

CVE ID

CVE-2021-26084

Vulnerability Name

Atlassian Confluence Server 및 Data Center 객체 그래프 탐색 언어(OGNL) 인젝션 취약점

Project & Product

• Project: Atlassian
• Product: Confluence Server 및 Data Center

Dates

• Date Added: 2021-11-03
• Due Date: 2021-11-17

Description

Atlassian Confluence Server 및 Data Center에 객체 그래프 탐색 언어(OGNL) 인젝션 취약점이 존재하여 인증되지 않은 공격자가 코드를 실행할 수 있습니다.

Known to Be Used in Ransomware Campaigns?

Known

Action

공급업체 지침에 따라 업데이트를 적용하십시오.

Additional Notes

• NVD entry:

Related Security News

• Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure

More CVE Info

• Common Vulnerabilities & Exposures (CVE) List