← Database

CVE-2021-41308

MEDIUM CVSS: 6.5 Published: 2021-10-26 Modified: 2026-06-17

Description

Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. The affected versions are before version 8.6.0, from version 8.7.0 before 8.13.12, and from version 8.14.0 before 8.20.1.

Affected Platforms

Atlassian JiraAtlassian Jira Software Data CenterAtlassian Jira Data CenterAtlassian Jira Server

Weakness Type

CWE-285, NVD-CWE-Other

References