CVE-2021-43941: CSRF
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including CsvFieldMappingsPage.jspa and ImporterValueMappingsPage.jspa) via a Cross-Site Request Forgery (CSRF) vulnerability in the jira-importers-plugin. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-43941.
What is the severity of CVE-2021-43941?
The severity of CVE-2021-43941 is medium with a score of 6.5.
Which Atlassian Jira versions are affected by CVE-2021-43941?
Atlassian Jira Server versions up to 8.13.5 and versions between 8.14.0 and 8.20.3, as well as Atlassian Jira Data Center versions up to 8.13.5 and versions between 8.14.0 and 8.20.3 are affected.
What does the vulnerability CVE-2021-43941 allow attackers to do?
The vulnerability CVE-2021-43941 allows remote attackers to modify several resources in Atlassian Jira Server and Data Center, including CsvFieldMappingsPage.jspa and ImporterValueMappingsPage.jspa, via a Cross-Site Request Forgery (CSRF) vulnerability in the jira-importers-plugin.
Is there a fix available for CVE-2021-43941?
Yes, Atlassian has released security patches to address the vulnerability. It is recommended to update to the latest version of Jira Server or Data Center to mitigate the risk.