Lucene search
Security-metrics-botATLASSIAN:JRASERVER-72916HistoryOct 18, 2021 - 4:31 a.m.
Anonymous user can view names of private projects and filters via IDOR in Workload Pie Chart Gadget - CVE-2021-41307
2021-10-1804:31:32
security-metrics-bot
jira.atlassian.com
12
0.01 Low
EPSS
Percentile
83.4%
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References (IDOR) vulnerability in the Workload Pie Chart Gadget.
The affected versions are before version 8.13.12, and from version 8.14.0 before 8.20.0.
Affected versions:
- version < 8.13.12
- 8.14.0 ≤ version < 8.20.0
Fixed versions:
- 8.13.12
- 8.20.0
- 8.21.0
Related
cve
cve
CVE-2021-41307
2021-10-26 05:15:07
nvd
nvd
CVE-2021-41307
2021-10-26 05:15:07
cvelist
cvelist
CVE-2021-41307
2021-10-25 00:00:00
atlassian
atlassian
prion
prion
Spoofing
2021-10-26 05:15:00