8.13.8

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-01	CVE-2021-39119	Incorrect Authorization vulnerability in Atlassian Data Center and Jira Affected versions of Atlassian Jira Server and Data Center allow users who have watched an issue to continue receiving updates on the issue even after their Jira account is revoked, via a Broken Access Control vulnerability in the issue notification feature. network low complexity atlassian CWE-863	5.0
2021-08-30	CVE-2021-39113	Insufficient Session Expiration vulnerability in Atlassian products Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. network low complexity atlassian CWE-613	5.0