CVE:CVE-2021-39113
CNNVD:CNNVD-202108-2679
Atlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。
Atlassian Jira Server 和Data Center 8.13.9之前版本, 8.14.0 至 8.18.0之前版本存在安全漏洞，攻击者可利用该漏洞通过allowlist功能在失去权限后仍能继续查看缓存内容
solution:Upgrade atlassian data_center to a higher version than 8.13.9,and avoid the version (,8.13.9); Upgrade atlassian jira to a higher version than 8.13.9,and avoid the version (,8.13.9); Upgrade atlassian jira_data_center to a higher version than 8.18.0,and avoid the version [8.14.0,8.18.0); Upgrade atlassian jira_server to a higher version than 8.18.0,and avoid the version [8.14.0,8.18.0)