Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from version 8.6.0 before 8.13.7, from version 8.14.0 before 8.17.1, and from version 8.18.0 before 8.18.1.

Remediation

References

CVE-2021-39112

Related Vulnerabilities

WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (6.0.3.3)

WordPress Plugin BuddyPress Multiple Vulnerabilities (5.1.2)

Oracle Application Server Other Vulnerability (CVE-2005-3204)

OpenSSL Improper Input Validation Vulnerability (CVE-2015-1787)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9281)

Severity

Medium

Classification

CVE-2021-39112 CWE-601

Tags

Missing Update Known Vulnerabilities