Atlassian Jira < 8.21.0 Broken Access Control (JRASERVER-73071)

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is affected by a broken access control vulnerability in its /secure/EditSubscription.jspa endpoint. An authenticated, remote attacker can exploit this issue to add administrator groups to...