CVE-2024-21682

This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Discovery, which can be downloaded via Atlassian Marketplace, is a network scanning tool that can be used with or without an agent with Jira Service Management Cloud, Data Center or Server. It detects hardware and software that is connected to your local network and extracts detailed information about each asset. This data can then be imported into Assets in Jira Service Management to help you manage all of the devices and configuration items within your local network. This Injection vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to modify the actions taken by a system call which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction. Atlassian recommends that Assets Discovery customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions See the release notes (https://confluence.atlassian.com/assetapps/assets-discovery-3-2-1-cloud-6-2-1-data_center-1333987182.html). You can download the latest version of Assets Discovery from the Atlassian Marketplace (https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=datacenter&tab=installation). This vulnerability was reported via our Penetration Testing program.

• CWE-94

• https://confluence.atlassian.com/assetapps/assets-discovery-3-2-1-cloud-6-2-1-data_center-1333987182.htmlRelease Notes
• https://confluence.atlassian.com/pages/viewpage.action?pageId=1354501606Vendor Advisory
• https://jira.atlassian.com/browse/JSDSERVER-15067Issue Tracking, Vendor Advisory
• https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=datacenter&tab=installationProduct
• https://confluence.atlassian.com/assetapps/assets-discovery-3-2-1-cloud-6-2-1-data_center-1333987182.htmlRelease Notes
• https://confluence.atlassian.com/pages/viewpage.action?pageId=1354501606Vendor Advisory
• https://jira.atlassian.com/browse/JSDSERVER-15067Issue Tracking, Vendor Advisory
• https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=datacenter&tab=installationProduct

Published

Feb 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-21675Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-21676Rejected reason: This CVE's publication may have been a fals…
• CVE-2024-21677This High severity Path Traversal vulnerability was introduc…8.8
• CVE-2024-21678This High severity Stored XSS vulnerability was introduced i…8.5
• CVE-2024-21679Rejected reason: To maintain compliance with CNA rules, we h…
• CVE-2024-2168A vulnerability was found in SourceCodester Online Tours & T…7.2
• CVE-2024-21683This High severity RCE (Remote Code Execution) vulnerability…8.8
• CVE-2024-21684There is a low severity open redirect vulnerability within a…4.3
• CVE-2024-21685This High severity Information Disclosure vulnerability was …6.5
• CVE-2024-21686This High severity Stored XSS vulnerability was introduced i…8.7
• CVE-2024-21687This High severity File Inclusion vulnerability was introduc…8.1
• CVE-2024-21688Rejected reason: To maintain compliance with CNA rules, we h…