CVE-2021-43959

CVE-2021-43959: falha em Atlassian Jira Service Management Server

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Jira Service Management Data Center+ Monitorar Jira Service Management Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.7%
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability in the CSV importing feature of JSM Insight. When running in an environment like Amazon EC2, this flaw may be used to access to a metadata resource that provides access credentials and other potentially confidential information. The affected versions are before version 4.13.20, from version 4.14.0 before 4.20.8, and from version 4.21.0 before 4.22.2.
Produtos afetados
Atlassian · Jira Service Management Data CenterAtlassian · Jira Service Management Server
CVEs relacionadas — Atlassian Jira Service Management Server

No mesmo produto, das mais perigosas para as menos.

CVE-2026-21589CRITICALCVE-2026-21589EPSS 99.7%KEVCVE-2022-0540CRITICALCVE-2022-0540EPSS 88.1%CVE-2022-26135MEDIUMCVE-2022-26135EPSS 71.6%CVE-2020-36239CRITICALCVE-2020-36239EPSS 49.8%CVE-2023-22501CRITICALCVE-2023-22501EPSS 15.5%CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%