Is Jira vulnerable to CVE-2018-11776 (Apache struts2 vulnerability)

Question

Hi, We are using Jira v7.8.1 hence would like to know if it is impacted by CVE-2018-11776?

miikhy · Answer

Hey Ramya,

Welcome on Community!

You can find an official Atlassian statement on that CVE here: https://community.atlassian.com/t5/Bamboo-questions/Bamboo-and-CVE-2018-11776-Apache-Struts-vulnerability/qaq-p/877075

Quick spoiler: no products are affected :)

Hope this helps!

Cheers