CVE-2021-43953: CSRF

Q: What is CVE-2021-43953?

CVE-2021-43953 is a Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Jira Server and Data Center.

Q: How does CVE-2021-43953 impact Atlassian Jira Server and Data Center?

CVE-2021-43953 allows unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings.

Q: What is the severity of CVE-2021-43953?

The severity of CVE-2021-43953 is medium (4.3).

Q: How can I fix CVE-2021-43953?

To fix CVE-2021-43953, update Atlassian Jira Server or Data Center to version 8.13.16 or above, or between 8.20.5 and 8.14.0.

Published Feb 15, 2022

Updated

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings via a Cross-Site Request Forgery (CSRF) vulnerability in the /secure/admin/ViewInstrumentation.jspa endpoint. The affected versions are before version 8.13.16, and from version 8.14.0 before 8.20.5.

Affected Software

4 affected components

Atlassian Data Center<8.13.16

Atlassian Data Center>=8.14.0<8.20.5

Atlassian Jira<8.13.16

Atlassian Jira>=8.14.0<8.20.5

Event History

Feb 15, 2022

CVE Published

via MITRE·02:40 AM

Data Sourced

via MITRE·02:40 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2021-43953?

CVE-2021-43953 is a Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Jira Server and Data Center.

How does CVE-2021-43953 impact Atlassian Jira Server and Data Center?

CVE-2021-43953 allows unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings.

Which versions of Atlassian Jira Server and Data Center are affected by CVE-2021-43953?

Affected versions of Atlassian Jira Server and Data Center are before 8.13.16 and between 8.14.0 and 8.20.5.

What is the severity of CVE-2021-43953?

The severity of CVE-2021-43953 is medium (4.3).

How can I fix CVE-2021-43953?