Firetruck

CVE-2021-26086

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
jira_data_centeratlassian / jira_data_center>= 0, < 8.5.14affected
jira_data_centeratlassian / jira_data_center>= 0, < 8.5.14affected
jira_data_centeratlassian / jira_data_center>= 0, < 8.5.14affected
jira_data_centeratlassian / jira_data_center>= 8.14.0, < 8.16.1affected
jira_data_centeratlassian / jira_data_center>= 8.14.0, < 8.16.1affected
jira_data_centeratlassian / jira_data_center>= 8.14.0, < 8.16.1affected
jira_data_centeratlassian / jira_data_center>= 8.6.0, < 8.13.6affected
jira_data_centeratlassian / jira_data_center>= 8.6.0, < 8.13.6affected
jira_data_centeratlassian / jira_data_center>= 8.6.0, < 8.13.6affected
Jira Data CenterAtlassian / Jira Data Center>= 8.14.0, < unspecifiedaffected
Jira Data CenterAtlassian / Jira Data Center>= 8.6.0, < unspecifiedaffected
Jira Data CenterAtlassian / Jira Data Center>= unspecified, < 8.16.1affected
Jira Data CenterAtlassian / Jira Data Center>= unspecified, < 8.5.14affected
Jira Data CenterAtlassian / Jira Data Center>= unspecified, < 8.13.6affected
jira_serveratlassian / jira_server>= 0, < 8.5.14affected
jira_serveratlassian / jira_server>= 0, < 8.5.14affected
jira_serveratlassian / jira_server>= 0, < 8.5.14affected
jira_serveratlassian / jira_server>= 8.14.0, < 8.16.1affected
jira_serveratlassian / jira_server>= 8.14.0, < 8.16.1affected
jira_serveratlassian / jira_server>= 8.14.0, < 8.16.1affected
jira_serveratlassian / jira_server>= 8.6.0, < 8.13.6affected
jira_serveratlassian / jira_server>= 8.6.0, < 8.13.6affected
jira_serveratlassian / jira_server>= 8.6.0, < 8.13.6affected
Jira ServerAtlassian / Jira Server>= 8.14.0, < unspecifiedaffected
Jira ServerAtlassian / Jira Server>= 8.6.0, < unspecifiedaffected
Jira ServerAtlassian / Jira Server>= unspecified, < 8.5.14affected
Jira ServerAtlassian / Jira Server>= unspecified, < 8.16.1affected
Jira ServerAtlassian / Jira Server>= unspecified, < 8.13.6affected