.. / CVE-2021-26086

• LFI
• Nuclei
• Web

Exploit for Atlassian Jira Limited - Local File Inclusion (CVE-2021-26086)

Description:

Affected versions of Atlassian Jira Limited Server and Data Center are vulnerable to local file inclusion because they allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint.

Nuclei Template

View the template here CVE-2021-26086.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-26086.yaml

References: