| Note |
|---|
Jira and Jira Service Management are vulnerable to an authentication bypass in its web authentication framework, Jira Seraph. Although the vulnerability is at the core of Jira, it affects first and third-party apps like Xporter. We recommend the upgrade of Jira as mentioned on the Atlassian Security Advisory so all apps in your instance are protected against CVE-2022-0540. As an alternative, Xporter released the 6.9.9 to the Atlassian Marketplace which fixes the vulnerability. |
Xporter for Jira Server and Data Center - Authentication Bypass in Jira Seraph - CVE-2022-0540
...
| Jira | ||||||
|---|---|---|---|---|---|---|
|
Fix
We recommend the upgrade of Jira as mentioned on the Atlassian Security Advisory
...
so all apps in your instance are protected against CVE-2022-0540. As an alternative, Xporter released the 6.9.9 to the Atlassian Marketplace which fixes the vulnerability.
What You Need to Do
Upgrade
...