Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Jira Service Desk Server and Jira Service Desk Data Center - URL path traversal allows information d Edited

Hi Team,

Can anyone let me know with this critical issue, attacker will be able to see all the issues in JIRA and will be able to send e-mails.

Will they get JIRA Admin access where they can make changes to workflows /any other change?

Please explain me how to do Workaround 1:?

    <to type="temporary-redirect">/</to>


do we need to paste it as it it in WEB-INF file or we need to put the path of JIRA?

Please explain the same, it would be very helpful.



Log in or Sign up to comment
Community showcase
Published in Jira

⏰ Day in the life of a Jira Admin!

Hello Community! We thoroughly enjoyed this just-for-fun conversation in the Jira Admin Group about what it's like to be a Jira Admin. For #JiraJuly, our talented designers created these graphics t...

520 views 2 18
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you