CVE-2021-39124 — Atlassian / Jira Server

CVE-2021-39124

Atlassian / Jira Server PUBLISHED

Description (CNA)

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.16.0
Atlassian / Jira Data Center	affected unspecified before 8.16.0

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-72761

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72761

CISA-ADP

No English description supplied.

No references supplied.