Servers and applications
CVE-2021-41305
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object References (IDOR) vulnerability in the Average Number of Times in Status Gadget. The affected versions are before version 8.13.12..
- Severity
- High 7.5
- Published
- 26 Oct 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 8.13.12
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
JiraServers and applications · cpe:a:atlassian:jira |
|