Atlassian Connect Spring Boot vulnerabilities

2 CVEs affecting Atlassian Connect Spring Boot, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26077, published 2021-05-10.

More from Atlassian.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-26077, published 2021-05-10. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Broken Authentication in Atlassian Connect Spring Boot (ACSB) in version 1.1.0 before 2.1.3 and from version 2.1.4 before 2.1.5: Atlassian Connect Spring Boot is a Java Spring Boot package for…
• CVE-2021-26074, published 2021-04-16. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps.…