← Database

CVE-2021-43949

MEDIUM CVSS: 4.3 Published: 2022-01-10 Modified: 2026-06-17

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.

Affected Platforms

Atlassian Jira Service Management

Weakness Type

CWE-200

References