CVE-2021-26072

—

CVSS 3.1

4.3 medium

EPSS

39%p98

Published

Apr 1, 2021 (Apr 1, 2021)

Modified

Jun 17, 2026

Description

The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability.

Vendors: atlassian
Products: confluence data center, confluence server
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (38.8%)

In the news0 stories

No ingested article mentions this CVE yet.