Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Summary

Remote Code Execution on Document Generator

Advisory Release Date

 10:00 AM CET 

Product

Xray Test Management for Jira Server & Data Center

Affected on Xray Test Management for Jira Server & Jira Data Center Versions

  • Jira 8: 6.1.2 and earlier
  • Jira 7: 6.0.3.1_j7 and earlier

Fixed on Xray Test Management Jira Server & Jira Data Center Versions

  • Jira 8: 6.1.2.1 and later 
  • Jira 7: 6.0.3.1_j7 and later

Summary of Vulnerability

This advisory discloses a security vulnerability classified as critical that was present in Xray Test Management for Jira Server & Data Center. Versions of Jira Server & Data Center affected by this vulnerability:

  • Jira 8: 6.1.2 and earlier 2 and earlier (fixed in 6.1.2.1 and later).
  • Jira 7: 6.0.3.1_j7 and earlier (fixed in 6.0.3.1_j7 and later).

Customers who have upgraded Xray Test Management for Jira Server & Data Center to version 6.1.2.1 or higher are not affected.

...

We have released Xray for Jira Server & DC version 6.1.2.1 and 6.0.3.1 which is available for upgrade through the Atlassian Marketplace.

...