CVE-2021-43952

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-15 · updated 2026-06-17
Weakness: CWE-352

Description

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to restore the default configuration of fields via a Cross-Site Request Forgery (CSRF) vulnerability in the /secure/admin/RestoreDefaults.jspa endpoint. The affected versions are before version 8.21.0.

Affected products

Atlassian Jira: before 8.13.18; from 8.20.0 before 8.20.6 — fixed in 8.13.18, 8.20.6
Atlassian Jira: before 8.13.18; from 8.20.0 before 8.20.6 — fixed in 8.13.18, 8.20.6

How to fix

Upgrade to a fixed version: Atlassian Jira 8.13.18, 8.20.6; Atlassian Jira 8.13.18, 8.20.6. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-43952 or the next vulnerability affects your stack