Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from version 8.6.0 before 8.13.7, from version 8.14.0 before 8.17.1, and from version 8.18.0 before 8.18.1.

Remediation

References

CVE-2021-39112

Related Vulnerabilities

MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4624)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)

Nginx Out-of-bounds Read Vulnerability (CVE-2022-38890)

WordPress Plugin WP Academic People List Cross-Site Scripting (0.4.1)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9705)

Severity

Medium

Classification

CVE-2021-39112 CWE-601

Tags

Missing Update Known Vulnerabilities