Today we found out that some @#$%^@ created 3000+ accounts on our service desk using the signup form.
It is too easy for a bot to do this. How can this be avoided. Captcha is only triggered when the number of failed logins exceed a threshold.
Any suggestions?
Thanks
Hi Francis,
We we're hit with this too!
It is very concerning that this has not been taken more seriously, as many customers have public-facing Service Desk implementation and this could cripple a system - not to mention being a right pain the ass!
Are you affected by the following bug?
https://jira.atlassian.com/browse/JSDSERVER-5706
Jack
Hi Jack,
The Atlassian team addressed the problem and provided a fix in SD 3.12.2 which enables captcha in the signup page.
Francis
It looks like you're new here. Sign in or register to get started.