Lucene search
Security-metrics-botATLASSIAN:JRASERVER-71806HistoryNov 16, 2020 - 12:12 a.m.
CSRF token theft through referrer headers - CVE-2021-39126
2020-11-1600:12:48
security-metrics-bot
jira.atlassian.com
14
0.002 Low
EPSS
Percentile
52.5%
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerability, following an Information Disclosure vulnerability in the referrer headers which discloses a user’s CSRF token.
The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.2.
Affected versions:
- version < 8.5.10
- 8.6.0 ≤ version < 8.13.1
Fixed versions:
- 8.5.10
- 8.13.1
Related
prion
prion
Cross site request forgery (csrf)
2021-10-21 03:15:00
cnvd
cnvd
Atlassian Jira Code Injection Vulnerability
2021-10-24 00:00:00
nessus
nessus
Atlassian Jira < 8.5.10 / 8.6.x < 8.13.1 XSRF (JRASERVER-71806)
2022-07-06 00:00:00
cve
cve
CVE-2021-39126
2021-10-21 03:15:07
cvelist
cvelist
CVE-2021-39126
2021-09-14 00:00:00
nvd
nvd
CVE-2021-39126
2021-10-21 03:15:07
atlassian
atlassian
CSRF token theft through referrer headers - CVE-2021-39126
2020-11-16 00:12:48