High severity8.8NVD Advisory· Published Feb 22, 2021· Updated Jun 17, 2026

CVE-2021-26068

Description

An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers to execute arbitrary code via a template injection vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jira Server For Slack
cpe:2.3:a:atlassian:jira_server_for_slack:*:*:*:*:*:*:*:*
Range: >=0.0.3,<2.0.15
Atlassian/Jira Server for Slack pluginllm-create
Range: <2.0.15
Atlassian/Jira Servercpe-rescue
Range: 0.0.3

Patches

Vulnerability mechanics

References

confluence.atlassian.com/jira/jira-server-for-slack-security-advisory-17th-february-2021-1044091690.htmlnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000