Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Atlassian Atlasboard: Unrestricted File Access via Path Traversal

CVE-2021-39109 · published 5 years ago
Summary

A security issue in older versions of Atlassian Atlasboard allows attackers to access files they shouldn't be able to see. This could potentially expose sensitive information. Update to version 1.1.9 or later to fix the issue.

What to do
  • Update mabed atlasboard to version 1.1.9.
  • Update atlassian atlasboard to version 1.1.9 or later.
Affected software
Ecosystem VendorProductAffected versions
npm mabed atlasboard < 1.1.9
Fix: upgrade to 1.1.9
– atlassian atlasboard < 1.1.9
cpe:2.3:a:atlassian:atlasboard:*:*:*:*:*:*:*:*
Original advisory text
The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability.
The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published1 Sep 2021
Updated3 Nov 2026
First seen6 Mar 2026
Sources
GHSA-25pr-6pr6-68v7 · GHSA
CVE-2021-39109 · NVD
Track software like this
Free during beta