Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,296,587
Community Members
 
Community Events
165
Community Groups

Jira Service Desk Server and Jira Service Desk Data Center - URL path traversal allows information d

Edited

Hi Team,

Can anyone let me know with this critical issue, attacker will be able to see all the issues in JIRA and will be able to send e-mails.

Will they get JIRA Admin access where they can make changes to workflows /any other change?

Please explain me how to do Workaround 1:?

<rule>
    <from>^/[^?]*\.\..*$</from>
    <to type="temporary-redirect">/</to>
</rule>

 

do we need to paste it as it it in WEB-INF file or we need to put the path of JIRA?

Please explain the same, it would be very helpful.

0 comments

Comment

Log in or Sign up to comment
TAGS
Community showcase
Published in Jira Software

Upcoming changes to epic fields in company-managed projects

👋 Hi there Jira Community! A few months ago we shared with you plans around renaming epics in your company-managed projects. As part of these changes, we highlighted upcoming changes to epics on...

14,582 views 37 45
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you