Maven/com.atlassian.connect:atlassian-connect-spring-boot-starter CVE-2021-26074: medium 6.5, EPSS 0.65%
Broken Authentication in Atlassian Connect Spring Boot
Action: Upgrade com.atlassian.connect:atlassian-connect-spring-boot-starter to 2.1.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 2.1.3 | - |
Fixed versions
| 2.1.3 |
Sources
- osv: GHSA-cpcr-74q9-74gp
- https://nvd.nist.gov/vuln/detail/CVE-2021-26074
- https://community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-allows-bypass-of-app-qsh-verification-via-context-jwts/47072
- https://confluence.atlassian.com/pages/viewpage.action?pageId=1051986106
CVE-2021-26074 · published · modified · JSON