It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

URL Path Traversal in Jira Service Desk Server and Jira Service Desk Data Center

Irnik Iv I'm New Here Oct 23, 2019

The issue:

https://jira.atlassian.com/browse/JSDSERVER-6517

 

My current product version:

JIRA v7.8.0

JIRA Agile v7.8.0-DAILY20180212023044

I don't have installed Jira Service Desk Server and Jira Service Desk Data Center.

 

Should I worry about this vulnerability issue? Is it affecting my products?

2 answers

2 accepted

1 vote
Answer accepted
Alexis Robert Community Leader Oct 23, 2019

Hi @Irnik Iv , 

 

you are not affected by this security issue, but since your instance version is 7.8.0 you're still vulnerable to many securiy issues : https://confluence.atlassian.com/jira/security-advisories-112853939.html

You should upgrade as soon as possible to Jira 7.13.8.

 

Let me know if this helps, 

 

--Alexis 

Well seen Alexis! ;) 

Like Alexis Robert likes this
0 votes
Answer accepted

Hi, 

First of all, welcome to that Atlassian Community. It is good to have you here. 

As mentionned in the CVE details, this vulnerability only affects Jira Service Desk (Server and Data Center), even if users who set the "Browse Project" permission for their Jira Software or Jira Core projects to "Group - Anyone". 
So, you do not have to worry. 

But, if you still have doubts, you can ask the Atlassian support for confirmation.

I hope this will help. 

Thanks
Boris

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted in Jira

Demo Den Ep. 7: New Jira Cloud Reports

Learn how to use two new reports for next-gen projects in Jira Cloud:  Cumulative flow diagram and Sprint burndown chart. Ivan Teong, Product Manager, Jira Software, demos the Cumulative ...

231 views 1 2
Join discussion

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you