CVE-2021-26075
First published: Wed Apr 14 2021(Updated: )
The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path of the Jira application data directory via an information disclosure vulnerability in the error message when presented with an invalid filename.
Credit: security@atlassian.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Atlassian Data Center | <8.5.12 | |
| Atlassian JIRA | <8.5.12 | |
| Atlassian Jira Data Center | >=8.6.0<8.13.4 | |
| Atlassian Jira Data Center | >=8.14.0<8.15.1 | |
| Atlassian Jira Server | >=8.6.0<8.13.4 | |
| Atlassian Jira Server | >=8.14.0<8.15.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-26075?
CVE-2021-26075 is a vulnerability in the Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center.
What is the severity of CVE-2021-26075?
The severity of CVE-2021-26075 is medium with a severity value of 4.3.
How does CVE-2021-26075 affect Atlassian Jira?
CVE-2021-26075 affects Atlassian Jira versions up to 8.5.12.
How does CVE-2021-26075 affect Atlassian Jira Data Center?
CVE-2021-26075 affects Atlassian Jira Data Center versions from 8.6.0 to 8.13.4.
How does CVE-2021-26075 affect Atlassian Jira Server?
CVE-2021-26075 affects Atlassian Jira Server versions from 8.6.0 to 8.13.4.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/atlassian
- canonical/atlassian data center
- canonical/atlassian jira
- canonical/atlassian jira data center
- version/atlassian jira data center/8.6.0
- version/atlassian jira data center/8.14.0
- canonical/atlassian jira server
- version/atlassian jira server/8.6.0
- version/atlassian jira server/8.14.0