Description
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Confluence Server | unspecified – < 7.4.10, 7.5.0 – < unspecified, unspecified – < 7.12.3 | 7.4.10 |
| Atlassian | Confluence Data Center | unspecified – < 7.4.10, 7.5.0 – < unspecified, unspecified – < 7.12.3 | 7.4.10 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Atlassian Confluence 7.12.2 - Pre-Authorization Arbitrary File Read EDB-50377 · webapps · Oct 5, 2021
GitHub 1 repository
-
ColdFusionX/CVE-2021-26085 ★ 13 · Oct 5, 2021
Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability (CVE-2021-26085)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Atlassian Confluence Server - Local File Inclusion http/cves/2021/CVE-2021-26085.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.