Atlassian JIRA Server CSRF vulnerability detected port.data-version="7.12.1">

[Jeff Kell]

Is there a fix in JIRA to remove the CSRF vulnerability?

[Rafeeq Mohammed (CONT)]

Hi Guys, 

Do you guys know something about whitehat security csrf vulnerability , i am facing issue in deploying it getting "whitelabel error page : Invalid CSRF Token 'null' was found on the request parameter'_csrf' or header 'X-XSRF-TOKEN'."

Any help will be appreciated 

Thanks

[Jeff Kell]

Thanks.  We upgraded to 8.0.2 (latest approved so far within our company).  We'll see if the next scan also flags "CSRF" issues.

[Nic Brough -Adaptavist-]

Which vulnerability?  All we've got there is 7.12.1 which has a number, mostly fixed by "upgrade" as recommended by Atlassian.