Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-72643

Vulnerable version of Underscore.js used - CVE-2021-23358

    XMLWordPrintable

Details

    • 7.2
    • High
    • CVE-2021-23358

    Description

      Affected versions of Atlassian Jira Server and Data Center used Underscore.js 1.9.1, which was vulnerable to CVE-2021-23358.

      The affected versions of Atlassian Jira Server and Data Center are before version 8.18.0.

       

      Affected versions:

      • version < 8.13.10
      • 8.14.0 <= version < 8.18.0

      Fixed versions:

      • 8.13.10
      • 8.18.0  

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. CONFSERVER-74276 CVE-2021-23358 - Need to upgrade Underscore.js to 1.13.1 or higher

          • Low - Low priority issues
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-72474 CVE-2021-23358 - Need to upgrade Underscore.js to 1.13.1 or higher

          • High - High priority issues
          • Closed

          VULN-500019 Loading...

          mentioned in

          Page Loading...

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              security-metrics-bot Security Metrics Bot
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: