Skip to content
OpenAdvisories
Unscored CVE-2021-39124 EUVD-2021-25560GHSA-67vg-8r27-8fjh

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote at…

Published Sep 14, 2021 · Updated Oct 10, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Data Center Product: Jira Server Category: Web / CMS

Description

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.16.0 8.16.0
Atlassian Jira Data Center unspecified – < 8.16.0 8.16.0

References