CVE:CVE-2021-39127
CNNVD:CNNVD-202110-1524
Atlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。
Atlassian Jira 存在安全漏洞，该漏洞源于 Atlassian Jira 服务器和数据中心版本允许匿名远程攻击者通过访问控制漏洞 (BAC) 漏洞攻击查询组件 JQL 端点。
solution:Upgrade atlassian jira to a higher version than 8.5.10,and avoid the version (,8.5.10); Upgrade atlassian jira_data_center to a higher version than 8.13.1,and avoid the version [8.6.0,8.13.1); Upgrade atlassian jira_server to a higher version than 8.13.1,and avoid the version [8.6.0,8.13.1); Upgrade atlassian jira_software_data_center to a higher version than 8.5.10,and avoid the version (,8.5.10)