Description
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. The affected versions are before version 8.6.0, from version 8.7.0 before 8.13.12, and from version 8.14.0 before 8.20.1.
Remediation
References
Related Vulnerabilities
WordPress Plugin Import XML and RSS Feeds Server-Side Request Forgery (2.0.2)
OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-0735)
WordPress Plugin Process Steps Template Designer Cross-Site Request Forgery (1.2.1)
Oracle HTTP Server Use of Insufficiently Random Values Vulnerability (CVE-2020-35163)