CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2021-39112
Medium (4.8) in atlassian. EPSS 1.0% chance of exploitation in the next 30 days.
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. The affected versions are before version 8.5.15, from version 8.6.0 before 8.13.7, from version 8.14.0 before 8.17.1, and from version 8.18.0 before 8.18.1.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-11-01)
- CWEs
- CWE-601, CWE-1022
- Published
- Modified
- Record from
- the NVD, synced
Affected
- atlassian:data_center
- atlassian:jira
- atlassian:jira_data_center
- atlassian:jira_server