The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×

Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Jira XSS Vulnerability

Jeawoong Choi
February 24, 2022

Hi
Currently we are using Jira version 7.13.18.

A few days ago, while checking for security vulnerabilities, we put "> <script > alert(String.fromCharCode(88,83,83))</script> in the parameter value, and the script started working.

The security center of my company considers this issue to be a great vulnerability.

Is there any way to solve it?

thank you.

 

0 answers

Comments for this post are closed

Community moderators have prevented the ability to post new answers.