Jira renders HTML/JavaScript in fields leading to XSS

[Gummadi_ SivaSandeep]

Is there any option to block the fields for Incident response Tickets while entering the IPS address and URLS. As i was entering the ip address and Ticket URLS the URL is re-directing to malicious Website.

[Nikola Perisic]

Welcome @Gummadi_ SivaSandeep 

Are you referring to your service management project? And also, report this issue to the Atlassian as well, if it's XSS then it's a security issue.

[Gummadi_ SivaSandeep]

yes i am referring to my JIRA-Service management project and XSS is a Security Issue

[Nikola Perisic]

You have two options here: either to remove the field causing the security issue or to apply the issue security levels. The first option here is the best, since it is causing a much higher risk.Please report this to Atlassian.

[Ali Mohammed Afar]

All service