CVE-2024-21401

CRITICAL 9.8CVE-2024-21401 · Published 13/02/2024 · updated 10/08/2026

In short

CVE-2024-21401 is a CRITICAL (CVSS 9.8) vulnerability affecting entra jira sso plugin (microsoft).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.7% of all vulnerabilities.
Fix: update to 1.1.2 or later.

Package	Affected versions	Patched versions
entra jira sso plugin microsoft	`< 1.1.2`	`1.1.2`

Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.