CVE-2021-39127: Medium severity atlassian jira vulnerability
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to the query component JQL endpoint via a Broken Access Control vulnerability (BAC) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.1.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
CVE-2021-39127
What is the severity level of CVE-2021-39127?
The severity level of CVE-2021-39127 is medium (5.3).
What is the affected software for CVE-2021-39127?
The affected software for CVE-2021-39127 includes Atlassian Jira Server, Atlassian Jira Data Center, and Atlassian Jira Software Data Center.
How can anonymous remote attackers exploit CVE-2021-39127?
Anonymous remote attackers can exploit CVE-2021-39127 by targeting the query component JQL endpoint via a Broken Access Control vulnerability.
Which versions of Atlassian Jira Server and Data Center are affected by CVE-2021-39127?
Versions before 8.5.10 of Atlassian Jira Server and versions from 8.6.0 before 8.13.1 of Atlassian Jira Server and Data Center are affected by CVE-2021-39127.