{"action":"Upgrade com.atlassian.connect:atlassian-connect-spring-boot-starter to 2.1.3 or later.","affected":[{"fixed":"2.1.3","introduced":"1.1.0"}],"component":"com.atlassian.connect:atlassian-connect-spring-boot-starter","cve_ids":["CVE-2021-26074"],"ecosystem":"Maven","epss":0.00651,"exploited":false,"fixed_versions":["2.1.3"],"ghsa_id":"GHSA-cpcr-74q9-74gp","id":"tcs_01M5N8SX2WQ035CS9WZ22BGZ5C","modified_at":"2023-11-08T04:05:20.046006Z","published_at":"2021-05-10T15:19:04Z","references":["https://osv.dev/vulnerability/GHSA-cpcr-74q9-74gp","https://nvd.nist.gov/vuln/detail/CVE-2021-26074","https://community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-allows-bypass-of-app-qsh-verification-via-context-jwts/47072","https://confluence.atlassian.com/pages/viewpage.action?pageId=1051986106"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cpcr-74q9-74gp","url":"https://osv.dev/vulnerability/GHSA-cpcr-74q9-74gp"}],"summary":"Broken Authentication in Atlassian Connect Spring Boot"}