CVE-2021-39112 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from version 8.6.0 before 8.13.7, from version 8.14.0 before 8.17.1, and from version 8.18.0 before 8.18.1.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.5.15; affected 8.6.0 before unspecified; affected unspecified before 8.13.7; affected 8.14.0 before unspecified; affected unspecified before 8.17.1; affected 8.18.0 before unspecified; affected unspecified before 8.18.1
Atlassian / Jira Data Center	affected unspecified before 8.5.15; affected 8.6.0 before unspecified; affected unspecified before 8.13.7; affected 8.14.0 before unspecified; affected unspecified before 8.17.1; affected 8.18.0 before unspecified; affected unspecified before 8.18.1

CWE

CWE-1022

References

https://jira.atlassian.com/browse/JRASERVER-72433

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72433

CISA-ADP

No English description supplied.

No references supplied.