What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-43941.

What is the severity of CVE-2021-43941?

The severity of CVE-2021-43941 is medium with a score of 6.5.

Which Atlassian Jira versions are affected by CVE-2021-43941?

Atlassian Jira Server versions up to 8.13.5 and versions between 8.14.0 and 8.20.3, as well as Atlassian Jira Data Center versions up to 8.13.5 and versions between 8.14.0 and 8.20.3 are affected.

What does the vulnerability CVE-2021-43941 allow attackers to do?

The vulnerability CVE-2021-43941 allows remote attackers to modify several resources in Atlassian Jira Server and Data Center, including CsvFieldMappingsPage.jspa and ImporterValueMappingsPage.jspa, via a Cross-Site Request Forgery (CSRF) vulnerability in the jira-importers-plugin.

Is there a fix available for CVE-2021-43941?

Yes, Atlassian has released security patches to address the vulnerability. It is recommended to update to the latest version of Jira Server or Data Center to mitigate the risk.

Vulnerability/
CVE-2021-43941

medium

6.5

CWE

352

15/2/2022

10/6/2022

CVE-2021-43941: CSRF

First published: Tue Feb 15 2022(Updated: )

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including CsvFieldMappingsPage.jspa and ImporterValueMappingsPage.jspa) via a Cross-Site Request Forgery (CSRF) vulnerability in the jira-importers-plugin. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.

Credit: security@atlassian.com

Affected Software	Affected Version	How to fix
Atlassian Jira Data Center	<8.13.5
Atlassian Jira Data Center	>=8.14.0<8.20.3
Atlassian Jira Server	<8.13.5
Atlassian Jira Server	>=8.14.0<8.20.3

Never miss a vulnerability like this again

Reference Links

https://jira.atlassian.com/browse/JRASERVER-73073

Frequently Asked Questions

What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-43941.
What is the severity of CVE-2021-43941?
The severity of CVE-2021-43941 is medium with a score of 6.5.
Which Atlassian Jira versions are affected by CVE-2021-43941?
Atlassian Jira Server versions up to 8.13.5 and versions between 8.14.0 and 8.20.3, as well as Atlassian Jira Data Center versions up to 8.13.5 and versions between 8.14.0 and 8.20.3 are affected.
What does the vulnerability CVE-2021-43941 allow attackers to do?
The vulnerability CVE-2021-43941 allows remote attackers to modify several resources in Atlassian Jira Server and Data Center, including CsvFieldMappingsPage.jspa and ImporterValueMappingsPage.jspa, via a Cross-Site Request Forgery (CSRF) vulnerability in the jira-importers-plugin.
Is there a fix available for CVE-2021-43941?
Yes, Atlassian has released security patches to address the vulnerability. It is recommended to update to the latest version of Jira Server or Data Center to mitigate the risk.

collector/nvd-index
agent/references
agent/severity
agent/weakness
agent/author
agent/tags
agent/description
agent/type
agent/event
agent/softwarecombine
vendor/atlassian
canonical/atlassian jira data center
version/atlassian jira data center/8.14.0
canonical/atlassian jira server
version/atlassian jira server/8.14.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.