Cross-Site Request Forgery Issue in Atlassian Jira Server and Data Center

CVE-2021-39126

What is CVE-2021-39126?

A security issue exists in Atlassian Jira Server and Data Center that allows remote attackers to manipulate various resources due to a Cross-Site Request Forgery (CSRF) vulnerability. This vulnerability is exacerbated by an Information Disclosure issue where referrer headers can reveal a user's CSRF token, making it possible for attackers to craft malicious requests. Affected users running versions prior to 8.5.10 and from 8.6.0 up to but not including 8.13.1 are particularly at risk. It is crucial for organizations to update their Jira installations to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References