CVE-2021-43952

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default configuration of fields via a…

published February 15, 2022

CVSS
—
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default configuration of fields via a Cross-Site Request Forgery (CSRF) vulnerability in the /secure/admin/RestoreDefaults.jspa endpoint. The affected versions are before version 8.21.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00415 · 34.7th percentile
Published
2022-02-15T00:45Z
EPSS history
Timeline
  • 15 FEB 00:45Z
    Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default configuration of fields via a…
    cvelistv5