VYPR
← All advisories
Medium severity5.7NVD Advisory· Published Jul 26, 2022· Updated Jun 17, 2026

CVE-2021-43959

CVE-2021-43959

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability in the CSV importing feature of JSM Insight. When running in an environment like Amazon EC2, this flaw may be used to access to a metadata resource that provides access credentials and other potentially confidential information. The affected versions are before version 4.13.20, from version 4.14.0 before 4.20.8, and from version 4.21.0 before 4.22.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Atlassian/Jira Service Desk2 versions
    cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:data_center:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:data_center:*:*:*range: <4.13.20
    • cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:server:*:*:*range: <4.13.20
  • Atlassian/Jira Service Management2 versions
    cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*range: >=4.14.0,<4.20.8
    • cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*range: >=4.14.0,<4.20.8
  • Atlassian/Jira Service Management Data Center and Serverllm-fuzzy3 versions
    <4.13.20, 4.14.0-<4.20.8, 4.21.0-<4.22.2+ 2 more
    • (no CPE)range: <4.13.20, 4.14.0-<4.20.8, 4.21.0-<4.22.2
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.