Update the version range information for CVE-2021-43953.

Signed-off-by: David Black <dblack@atlassian.com>
This commit is contained in:
David Black 2022-03-14 12:29:35 +11:00
parent 9cd315c592
commit 59e7a5a73d
No known key found for this signature in database
GPG Key ID: 75A6F429881B6236

View File

@ -16,18 +16,33 @@
"version": {
"version_data": [
{
"version_value": "8.21.0",
"version_value": "8.13.16",
"version_affected": "<"
},
{
"version_value": "8.14.0",
"version_affected": ">"
},
{
"version_value": "8.20.5",
"version_affected": "<"
}
]
}
},
{
},{
"product_name": "Jira Data Center",
"version": {
"version_data": [
{
"version_value": "8.21.0",
"version_value": "8.13.16",
"version_affected": "<"
},
{
"version_value": "8.14.0",
"version_affected": ">"
},
{
"version_value": "8.20.5",
"version_affected": "<"
}
]
@ -47,7 +62,7 @@
"description_data": [
{
"lang": "eng",
"value": "Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings via a Cross-Site Request Forgery (CSRF) vulnerability in the /secure/admin/ViewInstrumentation.jspa endpoint. The affected versions are before version 8.21.0."
"value": "Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings via a Cross-Site Request Forgery (CSRF) vulnerability in the /secure/admin/ViewInstrumentation.jspa endpoint. The affected versions are before version 8.13.16, and from version 8.14.0 before 8.20.5."
}
]
},
@ -72,4 +87,4 @@
}
]
}
}
}