← Database

CVE-2021-43948

MEDIUM CVSS: 4.3 Published: 2022-02-15 Modified: 2026-06-17

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0.

Affected Platforms

Atlassian Jira Service Management

Weakness Type

NVD-CWE-Other

References