CVE-2021-39121

4.3 mediumEPSS 1.6%

Medium (4.3) in atlassian. EPSS 1.6% chance of exploitation in the next 30 days.

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from version 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
Published: 2021-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:data_center
atlassian:jira
atlassian:jira_data_center
atlassian:jira_server

References

https://jira.atlassian.com/browse/JRASERVER-72715
https://jira.atlassian.com/browse/JRASERVER-72715

Check your stack JSON