8.13.10

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-30	CVE-2022-26135	Server-Side Request Forgery (SSRF) vulnerability in Atlassian products A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. network low complexity atlassian CWE-918	4.0
2022-01-05	CVE-2021-43946	Unspecified vulnerability in Atlassian Jira Data Center Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator groups to filter subscriptions via a Broken Access Control vulnerability in the /secure/EditSubscription.jspa endpoint. network low complexity atlassian	6.5
2021-11-01	CVE-2021-41313	Unspecified vulnerability in Atlassian Jira Server Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. network low complexity atlassian	4.3
2021-10-26	CVE-2021-41308	Unspecified vulnerability in Atlassian products Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. network low complexity atlassian	4.0
2021-09-08	CVE-2021-39116	Unspecified vulnerability in Atlassian Jira Data Center Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the GIF Image Reader component. network atlassian	4.3