Groovy script runner security

Joachim Westlun

Hi!

I saw this youtube clip: http://www.youtube.com/watch?v=qDw2y-UYEXI

I'm trying to get my company to install Script runner but now I feel hesitant after seeing this clip.

I saw that the version of script runner hacked in the clip was older then the latest version available now.

I couldn't tell when I looked thru the version history that this issue has been fixed. Does anyone know anything about this?

Our jira-system will be located within the intranet so this is perhaps no issue? Can anyone spread any light on this?

Best regards

Joachim Westlund

JamieA

Hey... I think that guy was trying to make a name for himself as a security researcher or something. But it was fixed around 14 months ago - https://marketplace.atlassian.com/plugins/com.onresolve.jira.groovy.groovyrunner/versions#b603 - so if you have updated since then there is no issue.