Plugins Security

Question

Hi, we want to use a JIra plugin which is not supported. How was wondering what are the security implications of using any JIRA plgin and how do I mitigate risks to our business.

Do Atlassian do due diligence on these plugins, I am unable to find anything relevant on this topic except one post.

Kind Regards

Nic Brough -Adaptavist- · Answer

Exactly the same.  But as it's by Atlassian, it's not going to be malicious.

MK_7k1ec0 · Answer

Thanks for the input now if I see this plugin.

https://marketplace.atlassian.com/apps/288/jira-charting-plugin?hosting=server&tab=overview

Its says its from Atlassian but unsupported. How would it fit with your response.

Nic Brough -Adaptavist- · Answer

An "unsupported" plugin could be doing anything.  Atlassian verified ones have been through some security tests, and are known to be backed by trusted organisations, but unsupported leaves the door completely open.