CVE-2021-43950

Publication date

2022-02-15 03:10:09

Family

atlassian

State

PUBLISHED

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0.