VULNERABILITY INTELLIGENCE

CVE-2021-43950

CVSS score4.3 MEDIUM

EPSS probability0.84%

CISA KEVNot currently listed

Published2022-02-15

Last modified2026-06-17

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view import source configuration information via a Broken Access Control vulnerability in the Insight Import Source feature. The affected versions are before version 4.21.0.