8.19.0

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-26	CVE-2021-41307	Authorization Bypass Through User-Controlled Key vulnerability in Atlassian Jira Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References (IDOR) vulnerability in the Workload Pie Chart Gadget. network low complexity atlassian CWE-639	5.0
2021-10-26	CVE-2021-41308	Unspecified vulnerability in Atlassian products Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. network low complexity atlassian	4.0
2021-09-16	CVE-2021-39128	Code Injection vulnerability in Atlassian Jira Data Center and Jira Server Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators access to execute arbitrary Java code via a server-side template injection vulnerability in the Email Template feature. network low complexity atlassian CWE-94	6.5