Medium severity6.5NVD Advisory· Published Oct 21, 2021· Updated Jun 17, 2026
CVE-2021-39126
CVE-2021-39126
Description
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerability, following an Information Disclosure vulnerability in the referrer headers which discloses a user's CSRF token. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: unspecified
- Range: <8.5.10, >=8.6.0 <8.13.1
unspecified+ 1 more
- (no CPE)range: unspecified
- cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: <8.5.10
Patches
Vulnerability mechanics
References
1- jira.atlassian.com/browse/JRASERVER-71806nvdIssue TrackingPatchVendor Advisory
News mentions
0No linked articles in our index yet.