Miembros de
Boletines de Vulnerabilidades |
CVE-2021-39126 |
|
| Software afectado | ATLASSIAN |
| Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerability, following an Information Disclosure vulnerability in the referrer headers which discloses a user's CSRF token. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.1. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2021-39126 | |
