Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
高危 CVSS 7.5 CISA KEV 在册
摘要
Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- Atlassian:Multiple Products
- :
- :
- :
- :
- :
- :
- :
- :
数据来源
- CISA KEV DATABASE
- NVD DATABASE
原始链接
- https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html?ref=labs.watchtowr.com reference
- https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk reference
- https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk reference
- https://nvd.nist.gov/vuln/detail/CVE-2026-21589 reference
- https://jira.atlassian.com/browse/BAM-26567 Issue Tracking
- https://jira.atlassian.com/browse/BSERV-20604 Issue Tracking
- https://jira.atlassian.com/browse/CONFSERVER-104488 Issue Tracking
- https://jira.atlassian.com/browse/CRUC-8741 Issue Tracking
- https://jira.atlassian.com/browse/CWD-6610 Issue Tracking
- https://jira.atlassian.com/browse/FE-7583 Issue Tracking
- https://jira.atlassian.com/browse/JRASERVER-79546 Issue Tracking
- https://jira.atlassian.com/browse/JSDSERVER-16809 Issue Tracking
- https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21589 US Government Resource
时间线
- kev_ingest CISA KEV
- nvd_ingest NVD