The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning
Events
Champions
Release Notes
Community
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning Events Champions Release Notes
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning Events Champions Release Notes

Forums

Articles
Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Q&A
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

Need support to remove "Clickjacking" vulnerability in JIRA Service desk web service.

Abhijit Kirdat
Abhijit Kirdat
February 9, 2018

Please refer ticket no : SDS-29277.

We have performed mentioned steps on Tomcat web.xml file but still after vulnerability scanning we are getting same vulnerability hence unable to publish server over internet.

Please let us know the best step to close this vulnerability permanently.

 

But as per ticket number JRASERVER-25143 this vulnerability has been closed in upgraded version i.e. Jira core 7.6. Now we come to know that JIRA 7.7 has been also introduce so want to check whether we can go with this version directly.

Watch
Like Be the first to like this
626 views

1 answer

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

0 votes
Nic Brough -Adaptavist-
Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Champions.
Get recognized
February 9, 2018

You can stay on 7.6 if you want, it has been fixed there.  7.7 will include this fix.

Reply
Jira Service Management
Jira Service Management
TAGS
AUG Leaders

Atlassian Community Events

    See all events
    Community
    Forums
    FAQs Forums guidelines
    Learning
    About learning Resources
    Events
    Champions
    Release Notes
    Copyright © 2026 Atlassian
    Privacy Policy Notice at Collection Terms Security