How should I report Security issues?

[highjack]

Hi there,

I have identified 2 security risks of your applications. Please can you provide me with an email address I can contact you with so I can send you the information?

Thank you.

Ben

[JohnA · Accepted solution]

Hi Ben,

Thansk for taking the time to investigate these issues and report them to us! To answer your question, you can report security issues by following the instructions in this document: https://confluence.atlassian.com/display/Support/How+to+Report+a+Security+Issue

All the best,
John

[highjack]

Hi John,

If you take a look at my original question, it was asked under "addon-com.onresolve.jira.groovy.groovyrunner" as this is a 3rd party module I am unable to report it using the information in the link you provided.

Thank you.

[VitalyA]

Ben,

You can always write to security@ email address if the recommended way does not work for you. If this plugin turns out a third party module, and is neither bundled nor supported by Atlassian, you are better off reporting this issue to the author.

Send your information anyway, we will have a look.