CVE-2021-43951

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view object import configuration details via an Information Disclosure vulnerability in the Create Object type mapping feature. The affected versions are before version 4.21.0.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.317

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-43949,CVE-2021-43951 are affected in Atlassian Jira Service Management Data Center *	Windows
Vulnerabilities CVE-2021-43949,CVE-2021-43951 are affected in Atlassian Jira Service Management Server *	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234