CVE-2021-43946: [JRASERVER-73071] Unauthorized user can add administrator groups to filter subscriptions - CVE-2021-43946

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator groups to filter subscriptions via a Broken Access Control vulnerability in the /secure/EditSubscription.jspa endpoint.

The affected versions are before version 8.21.0.

Affected versions:

• version < 8.21.0

Fixed versions:

• 8.21.0