Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Note
We recommend the update of Xporter Xray for Jira Server & Data Center to the 6.1.2.1 - latest version.

...

Xray for Jira Server and Data Center - Remote Code Execution on Templates export

Summary

Remote Code Execution on Templates export

Advisory Release Date

 10:00 AM CET 

Product

Xporter Xray for Jira Server & Data Center

Affected on Xporter Xray for Jira Server & Jira Data Center Versions

  • 6.1.2 and earlier

Fixed on Xporter Jira Xray Jira Server & Jira Data Center Versions

  • 6.1.2.1 and later

...

This advisory discloses a security vulnerability classified as critical that was present in Xporter Xray for Jira Server & Data Center. Versions of Jira Server & Data Center affected by this vulnerability:

...

Customers who have upgraded Xporter Xray for Jira Server & Data Center to version 6.1.2.1 or higher are not affected.

Customers who are on any of the affected versions, upgrade your Xporter Xray for Jira Server & Data Center installations immediately to fix this vulnerability.

...

Jira
serverXpand IT Issue Tracker
serverIdb6309ad5-5416-33d6-9a09-a3e02f20d3e6
keyXRAY-8413


Fix

We have released Xporter Xray for Jira Server & DC version 6.1.2.1 which is available for upgrade through the Atlassian Marketplace.

...

You can upgrade to the latest version of Xporter Xray for Jira Server & Data Center using the Universal Plugin Manager as explained in Updating apps

...