CVE-2021-41307 — Atlassian / Jira Server

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References (IDOR) vulnerability in the Workload Pie Chart Gadget. The affected versions are before version 8.13.12, and from version 8.14.0 before 8.20.0.

Affected (CNA)

Vendor / product	Versions
Atlassian / Jira Server	affected unspecified before 8.13.12; affected 8.14.0 before unspecified; affected unspecified before 8.20.0
Atlassian / Jira Data Center	affected unspecified before 8.13.12; affected 8.14.0 before unspecified; affected unspecified before 8.20.0

CWE

No CWE identifiers supplied.

References

https://jira.atlassian.com/browse/JRASERVER-72916

ADP enrichment

CVE

No English description supplied.

https://jira.atlassian.com/browse/JRASERVER-72916

CISA-ADP

No English description supplied.

No references supplied.