Sensitive information

[Praveen]

1)sensitive information is present in the URL of the request to the application example like username, there may be a risk of the data being stored in the browser's history log. Please advise if there is any way to hide the username from the URL

2) Our vulnerability scanner flagged Spring Framework Vulnerability CVE-2022-22950. Can we know if this vulnerability has been addressed? Earlier there was ticket JRASERVER-74135 but I couldn't find the ticket now. Please advise if this has been addressed.

[Jack Brickey]

Hi @Praveen , I suggest reaching out to Atlassian support for this. The Community can't adequately answer these questions. I would also fewer you here - https://www.atlassian.com/trust/security/advisories