VULNERABILITY INTELLIGENCE

CVE-2021-39112

CVSS score4.8 MEDIUM
EPSS probability0.99%
CISA KEVNot currently listed
Published2021-08-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from version 8.6.0 before 8.13.7, from version 8.14.0 before 8.17.1, and from version 8.18.0 before 8.18.1.

Weakness classification

  • security@atlassian.com: CWE-1022
  • nvd@nist.gov: CWE-601

Primary references