VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Feb 15, 2022· Updated Jun 17, 2026

CVE-2021-43941

CVE-2021-43941

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including CsvFieldMappingsPage.jspa and ImporterValueMappingsPage.jspa) via a Cross-Site Request Forgery (CSRF) vulnerability in the jira-importers-plugin. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Atlassian/Jira Data Center
    cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
    Range: <8.13.5
  • Atlassian/Jira Server3 versions
    cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: <8.13.5
    • (no CPE)range: <8.13.15, >=8.14.0 <8.20.3
    • (no CPE)range: unspecified
  • Atlassian/Jira Importers Pluginllm-fuzzy
    Range: <8.13.15, >=8.14.0 <8.20.3
  • Atlassian/Jira Core Data Centerllm-fuzzy2 versions
    <8.13.15, >=8.14.0 <8.20.3+ 1 more
    • (no CPE)range: <8.13.15, >=8.14.0 <8.20.3
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.