CVE-2021-39116

MEDIUM

5.5

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0.

CVE Details

CVSS v3.1 Score5.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published9/8/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

atlassian:jira_data_centeratlassian:jira_server

References

https://jira.atlassian.com/browse/JRASERVER-72738(security@atlassian.com)

https://jira.atlassian.com/browse/JRASERVER-72738(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.