CVE-2021-43946 | BDVDB-2026-167175 Detail

AtlassianJira Server

Description#

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator groups to filter subscriptions via a Broken Access Control vulnerability in the /secure/EditSubscription.jspa endpoint. The affected versions are before version 8.13.21, and from version 8.14.0 before 8.20.9.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jira.atlassian.com/browse/JRASERVER-73071

Exploit#

No public exploit known

History#

Version 12022-01-05Record published in the CVE List.
Version 22024-10-08Most recent update recorded in the CVE List.