Need support to remove "Clickjacking" vulnerability in JIRA Service desk web service.

Abhijit Kirdat

Please refer ticket no : SDS-29277.

We have performed mentioned steps on Tomcat web.xml file but still after vulnerability scanning we are getting same vulnerability hence unable to publish server over internet.

Please let us know the best step to close this vulnerability permanently.

 

But as per ticket number JRASERVER-25143 this vulnerability has been closed in upgraded version i.e. Jira core 7.6. Now we come to know that JIRA 7.7 has been also introduce so want to check whether we can go with this version directly.

Nic Brough -Adaptavist-

You can stay on 7.6 if you want, it has been fixed there.  7.7 will include this fix.