Medium severity5.3NVD Advisory· Published Sep 1, 2021· Updated Jun 17, 2026

CVE-2021-39119

Description

Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Jira account is revoked, via a Broken Access Control vulnerability in the issue notification feature. The affected versions are before version 8.19.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Data Center
cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*
Range: <8.19.0
Atlassian/Jira
cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Range: <8.19.0
Atlassian/Jira Serverllm-fuzzy2 versions
<8.19.0+ 1 more
- (no CPE)range: <8.19.0
- (no CPE)range: unspecified
Atlassian/Jira Core Data Centerllm-fuzzy2 versions
<8.19.0+ 1 more
- (no CPE)range: <8.19.0
- (no CPE)range: unspecified

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-39119

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions