Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian · Confluence Server and Data Center
Date added (CISA)
2021-11-03
Remediation due
2021-11-17
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.