CVE-2021-39123: Atlassian Data Center

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the /rest/gadget/1.0/createdVsResolved/generate endpoint. The affected versions are before version 8.16.0.

Affected products

• Atlassian Data Center: before 8.16.0 (fixed in 8.16.0)
• Atlassian Jira: before 8.16.0 (fixed in 8.16.0)

Published 2021-09-14. Last modified 2026-06-17.