Description

Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Jira account is revoked, via a Broken Access Control vulnerability in the issue notification feature. The affected versions are before version 8.19.0.

Remediation

References

CVE-2021-39119

Related Vulnerabilities

XWiki Improper Restriction of XML External Entity Reference Vulnerability (CVE-2023-27480)

phpMyAdmin Other Vulnerability (CVE-2001-0478)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-5270)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5704)

IBM RTC Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-29786)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-287 CVE-2021-39119