Lucene search
PRIOn knowledge basePRION:CVE-2021-26074HistoryApr 16, 2021 - 3:15 a.m.
Authentication flaw
2021-04-1603:15:00
PRIOn knowledge base
www.prio-n.com
6
Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Spring Boot app occurs with a server-to-server JWT or a context JWT. Atlassian Connect Spring Boot versions from version 1.1.0 before version 2.1.3 erroneously accept context JWTs in lifecycle endpoints (such as installation) where only server-to-server JWTs should be accepted, permitting an attacker to send authenticated re-installation events to an app.
| CPE | Name | Operator | Version |
|---|---|---|---|
| connect_spring_boot | ge | 1.1.0 | |
| connect_spring_boot | lt | 2.1.3 |
Related
nvd
nvd
CVE-2021-26074
2021-04-16 03:15:12
cve
cve
CVE-2021-26074
2021-04-16 03:15:12
osv
osv
Broken Authentication in Atlassian Connect Spring Boot
2021-05-10 15:19:04
github
github
Broken Authentication in Atlassian Connect Spring Boot
2021-05-10 15:19:04
cvelist
cvelist
CVE-2021-26074
2021-04-13 00:00:00