CVE-2021-43949

No fix known EPSS <1%

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0.

Published 2022-01-10 · CVE record · OSV

Products: Atlassian Jira Service Management Server, Atlassian Jira Service Management Data Center