VULNERABILITY INTELLIGENCE

CVE-2021-26071

CVSS score3.5 LOW
EPSS probability0.52%
CISA KEVNot currently listed
Published2021-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Description

The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to enable and disable Jira Software configuration via a cross-site request forgery (CSRF) vulnerability.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references