CVE-2021-41309 | BDVDB-2026-165449 Detail

Description#

Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management project via a Broken Authentication vulnerability in the /plugins/servlet/audit/resource endpoint. The affected versions of Jira Server and Data Center are before version 8.19.1.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-12-08Record published in the CVE List.
2. Version 22024-10-10Most recent update recorded in the CVE List.