CVE-2021-43947: Critical severity atlassian data center vulnerability

Q: What is CVE-2021-43947?

CVE-2021-43947 is a Remote Code Execution (RCE) vulnerability in the Email Templates feature of Atlassian Jira Server and Data Center.

Q: How severe is CVE-2021-43947?

CVE-2021-43947 has a severity rating of 7.2, which is considered critical.

Q: Which versions of Atlassian Jira Server and Data Center are affected by CVE-2021-43947?

Versions up to and excluding 8.13.15 of Atlassian Jira Server and Data Center are affected.

Q: How can an attacker exploit CVE-2021-43947?

Remote attackers with administrator privileges can exploit CVE-2021-43947 to execute arbitrary code.

Q: Is there a fix for CVE-2021-43947?

Yes, Atlassian has provided a fix for CVE-2021-43947. It is recommended to upgrade to a version that is not affected.

Published Jan 6, 2022

Updated

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code Execution (RCE) vulnerability in the Email Templates feature. This issue bypasses the fix of https://jira.atlassian.com/browse/JSDSERVER-8665. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.

Affected Software

4 affected components

Atlassian Data Center<8.13.15

Atlassian Jira<8.13.15

Atlassian Jira Data Center>=8.14.0<8.20.3

Atlassian Jira Server>=8.14.0<8.20.3

Event History

Jan 6, 2022

CVE Published

via MITRE·01:05 AM

Data Sourced

via MITRE·01:05 AM

DescriptionWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2021-43947?

CVE-2021-43947 is a Remote Code Execution (RCE) vulnerability in the Email Templates feature of Atlassian Jira Server and Data Center.

How severe is CVE-2021-43947?

CVE-2021-43947 has a severity rating of 7.2, which is considered critical.

Which versions of Atlassian Jira Server and Data Center are affected by CVE-2021-43947?