Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-26086 PoC — Atlassian Jira 路径遍历漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Atlassian%20Jira%20cfx%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20CVE-2021-26086.md
Associated Vulnerability
Title:Atlassian Jira 路径遍历漏洞 (CVE-2021-26086)
Description:Atlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。 Atlassian Jira存在安全漏洞，该漏洞源于受影响版本的Atlassian Jira服务器和数据中心代码开发过程中存在实现不当的问题导致路径遍历漏洞。允许远程攻击者可利用该漏洞通过WEB-INF web.xml端点读取特定文件。受影响的版本为8.5.14之前版本、8.6.0版本至8.13.6、8.14.0版本至8.16.1。
File Snapshot

 # Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086

## 漏洞描述

Atlassian Jira Server/Data Center 8.4.0 - Lim

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.