Atlassian Jira < 8.5.13 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.13, 8.6.x 8.13.5 or 8.14.x 8.15.1. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability allowing remote anonymous attackers to...

Atlassian JIRA < 8.5.13 / 8.6.x < 8.13.5 / 8.14.x < 8.15.1 Multiple Vulnerablities

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is affected by multiple vulnerabilities. - The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from versi...

CVE-2021-26071

The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to enable and disable Jira Software configuration via a cross-site request forgery CS...

CVE-2021-26071

The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to enable and disable Jira Software configuration via a cross-site request forgery CS...

CVE-2021-26071

CVE-2021-26071 affects Jira Server/Data Center via the SetFeatureEnabled.jspa resource. The vulnerability allows remote anonymous attackers to enable/disable Jira Software configuration through a Cross-Site Request Forgery (CSRF) vulnerability. Affected versions are Jira Server/Data Center before...