Medium severity4.8NVD Advisory· Published Aug 25, 2021· Updated Jun 17, 2026

CVE-2021-39112

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from version 8.6.0 before 8.13.7, from version 8.14.0 before 8.17.1, and from version 8.18.0 before 8.18.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jira Core Data Centercpe-rescue
Range: unspecified
Atlassian/Crowd Data Center and Serverllm-fuzzy
Range: <8.5.15, 8.6.0-<8.13.7, 8.14.0-<8.17.1, 8.18.0-<8.18.1
Atlassian/Jirallm-fuzzy2 versions
<8.5.15, 8.6.0-<8.13.7, 8.14.0-<8.17.1, 8.18.0-<8.18.1+ 1 more
- (no CPE)range: <8.5.15, 8.6.0-<8.13.7, 8.14.0-<8.17.1, 8.18.0-<8.18.1
- cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*range: <8.5.15
Atlassian/Jira Servercpe-rescue2 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: >=8.6.0,<8.13.7
Atlassian/Data Center
cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*
Range: <8.5.15
Atlassian/Jira Data Center
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Range: >=8.6.0,<8.13.7

cvss	0.312
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-39112

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions