Skip to content
OpenAdvisories
Unscored CVE-2021-41313 EUVD-2021-28342GHSA-5pjh-5gpx-359v

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configura…

Published Nov 1, 2021 · Updated Oct 8, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Data Center Product: Jira Server Category: Web / CMS

Description

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20.7.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.20.7 8.20.7
Atlassian Jira Data Center unspecified – < 8.20.7 8.20.7

References