Unrated severityNVD Advisory· Published Aug 30, 2021· Updated Oct 11, 2024
CVE-2021-39113
CVE-2021-39113
Description
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version 8.14.0 before 8.18.0.
Affected products
2- Range: unspecified
- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- jira.atlassian.com/browse/JRASERVER-72573mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.