CVE-2021-41305 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object References (IDOR) vulnerability in the Average Number of Times in Status Gadget. The affected versions are before version 8.13.12..

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.13.12
Atlassian / Jira Data Center	affected unspecified before 8.13.12

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-72813

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72813

CISA-ADP

No English description supplied.

No references supplied.