medium6.5
CVE-2021-43941
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including CsvFieldMappingsPage.jspa and Importer…
Impact
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including CsvFieldMappingsPage.jspa and ImporterValueMappingsPage.jspa) via a Cross-Site Request Forgery (CSRF) vulnerability in the jira-importers-plugin. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira Data Center | before 8.13.5 from 8.14.0 before 8.20.3 |
| Atlassian | Jira Server | before 8.13.5 from 8.14.0 before 8.20.3 |