Skip to main content

Jira Data Center CVE-2021-41313

MEDIUM
Improper Authorization (CWE-285)
2021-11-01 security@atlassian.com
Atlassian Authentication Bypass Jira Data Center Jira Server
4.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 01, 2021 - 03:15 nvd
MEDIUM 4.3

DescriptionNVD

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20.7.

AnalysisAI

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-285. Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20.7. Affected products include: Atlassian Jira Data Center, Atlassian Jira Server. Version information: version 8.20.7..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Jira Data Center

View all
CVE-2024-21683 HIGH POC
8.8 May 21

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and
CVE-2022-0540 CRITICAL POC
9.8 Apr 20

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially
CVE-2022-26136 CRITICAL
9.8 Jul 20

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used

CVE-2021-26086 MEDIUM POC
5.3 Aug 16

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path tr
CVE-2020-14179 MEDIUM POC
5.3 Sep 21

Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field

CVE-2022-26137 HIGH
8.8 Jul 20

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Fil
CVE-2021-39113 HIGH
7.5 Aug 30

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached c
CVE-2020-14178 HIGH
7.5 Sep 01

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Infor
CVE-2020-14167 HIGH
7.5 Jul 01

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8
CVE-2025-22157 HIGH
7.2 May 20

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and

CVE-2022-36799 HIGH
7.2 Aug 01

This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has

CVE-2021-39128 HIGH
7.2 Sep 16

Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers

Same weakness CWE-285 – Improper Authorization

View all
CVE-2025-29927 CRITICAL POC
9.1
CVE-2016-5676 HIGH POC
7.5
CVE-2025-66301 CRITICAL POC
9.6
CVE-2023-32707 HIGH POC
8.8
CVE-2016-3352 HIGH
8.8
CVE-2025-29659 CRITICAL POC
9.8
CVE-2022-2595 CRITICAL POC
10.0
CVE-2026-30956 CRITICAL POC
9.9

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2021-41313 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy