Description

Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Jira account is revoked, via a Broken Access Control vulnerability in the issue notification feature. The affected versions are before version 8.19.0.

Remediation

References

CVE-2021-39119

Related Vulnerabilities

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43721)

osTicket CVE-2018-7195 Vulnerability (CVE-2018-7195)

IBM WebSEAL Missing Authorization Vulnerability (CVE-2019-4158)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-34961)

WordPress 4.9.x Arbitrary File Deletion Vulnerability (4.9 - 4.9.6)

Severity

Medium

Classification

CVE-2021-39119 CWE-287

Tags

Missing Update Known Vulnerabilities