8.17.0

DATE	CVE	VULNERABILITY TITLE	RISK
2021-08-30	CVE-2021-39111	Cross-site Scripting vulnerability in Atlassian products The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version 8.14.0 before 8.18.2 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the handling of supplied content such as from a PDF when pasted into a field such as the description field. network atlassian CWE-79	4.3
2021-08-30	CVE-2021-39113	Insufficient Session Expiration vulnerability in Atlassian products Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. network low complexity atlassian CWE-613	5.0
2021-08-25	CVE-2021-39112	Open Redirect vulnerability in Atlassian products Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL via a reverse tabnapping vulnerability in the Project Shortcuts feature. network atlassian CWE-601	4.9