High severity7.5NVD Advisory· Published Oct 26, 2021· Updated Jun 17, 2026

CVE-2021-41305

Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object References (IDOR) vulnerability in the Average Number of Times in Status Gadget. The affected versions are before version 8.13.12..

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Crowd Data Center and Serverllm-fuzzy
Range: <8.13.12
Atlassian/Jirallm-fuzzy
Range: <8.13.12
Atlassian/Jira Core Data Centercpe-rescue
Range: unspecified
Atlassian/Jira Servercpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

jira.atlassian.com/browse/JRASERVER-72813nvdIssue TrackingPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000