medium4.3
CVE-2021-39124
The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able…
Impact
The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Data Center | before 8.16.0 |
| Atlassian | Jira | before 8.16.0 |