[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjaX-yqGwcPE5tAaSTs8Pp_bqmrmn1-SwcyhKJFPwmGA":3,"g5a-risk:CVE-2021-39113":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":26,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":61,"references":62,"referencesCount":69,"weaknesses":70,"weaknessesCount":69,"isActivelyExploited":79,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":123,"notableEvents":124},"CVE-2021-39113","What is CVE-2021-39113?","Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version 8.14.0 before 8.18.0.","Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions,...","2021-08-30T07:15:06.737","2024-10-11T21:35:32.623",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":40,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":39,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.02458,[43,43,43,43,43,43,43],"High",[47,52,55,58],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"atlassian","data_center","*","cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",{"vendor":48,"product":53,"version":50,"criteria":54,"vulnerable":4},"jira","cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",{"vendor":48,"product":56,"version":50,"criteria":57,"vulnerable":4},"jira_data_center","cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",{"vendor":48,"product":59,"version":50,"criteria":60,"vulnerable":4},"jira_server","cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",4,[63],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FJRASERVER-72573","Atlassian",[67,68],"Issue Tracking","Vendor Advisory",1,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2021-39113? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-39113, a high severity cyber security vulnerability from 2021. Affected versions of Atlassian Jira Server and Data Center ...","CVE-2021-39113, CVE-2021-39113 vulnerability, CVE-2021-39113 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, atlassian security, data_center vulnerability, jira vulnerability, jira_data_center vulnerability, jira_server vulnerability","\u002Fwhat-is\u002Fcve-2021-39113",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-39113","Cybersecurity","CVE-2021-39113, CVE-2021-39113 vulnerability, CVE-2021-39113 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":26,"Negate":26,"Nodes":108},[109],{"Operator":110,"Negate":26,"CPEMatch":111},"OR",[112,115,117,121],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":114,"VersionEndIncluding":26},"0A6F7F6F-1C16-4769-BE9F-C57C1F148938","8.13.9",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":114,"VersionEndIncluding":26},"006A3D1F-F4A6-4971-9A69-30ACE29022D7",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":120,"VersionEndIncluding":26},"0DB8777E-BFA3-4194-880B-3291A57A40C7","8.14.0","8.18.0",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":120,"VersionEndIncluding":26},"0503EF7F-EEDD-4D97-810F-D8C46FDBE0E3",[],[],{"lastModified":11,"cacheTime":126,"version":36},1792382363365,{"score":128,"band":129,"action":130,"scoredAt":131},46,"Medium","Plan remediation","2026-10-16T06:51:55.071542+00:00"]