Vulnerability Bulletins |
CVE-2021-39115 |
|
| Affected software | ATLASSIAN |
| Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a Server_Side Template Injection vulnerability in the Email Template feature. The affected versions are before version 4.13.9, and from version 4.14.0 before 4.18.0. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2021-39115 | |