---
title: "Security Advisory - March, 2022"
canonical: "https://docs.getxray.app/space/XRAY/301469792/Security%20Advisory%20-%20March%2C%202022"
format: markdown
---
> ⚠️ We recommend the update of Xray Test Management for Jira Server & Data Center to the [6.1.2.1](https://getxraydocs.atlassian.net/wiki/display/XRAY/Xray+6.1.2.1+Release+Notes) - latest version.

# **Xray Test Management for Jira Server and Data Center - Remote Code Execution on Document Generator**

| **Summary** | <span style="color: #172b4d">Remote Code Execution on Document Generator</span> |
| --- | --- |
| **Advisory Release Date** | 3/22/2022 10:00 AM CET |
| **Product** | Xray Test Management for Jira Server & Data Center |
| **Affected on Xray Test Management for Jira Server & Jira Data Center Versions** | - 6.1.2 and earlier |
| **Fixed on Xray Test Management Jira Server & Jira Data Center Versions** | - 6.1.2.1 and later |

### **Summary of Vulnerability**

This advisory discloses a security vulnerability classified as **critical **that was present in Xray Test Management for Jira Server & Data Center.** **Versions of Jira Server & Data Center affected by this vulnerability:

- 6.1.2 and earlier (fixed in 6.1.2.1 and later).

**Customers who have upgraded Xray Test Management for Jira Server & Data Center to version 6.1.2.1 or higher ****are** **<span style="color: #000000">not affected</span>****.**

**Customers who are on any of the affected versions, upgrade your Xray Test Management for Jira Server & Data Center installations immediately to fix this vulnerability.**

#### **Severity**

We rate the severity level of these vulnerabilities as **critical**, according to the scale published in [Bugcrowd’s Vulnerability Rating Taxonomy](https://bugcrowd.com/vulnerability-rating-taxonomy). The scale allows us to rank the severity as critical, high, moderate, or low.

This is our assessment and you should evaluate its applicability to your own IT environment.


#### **Description**

<span style="color: #172b4d">We detected a Remote Code Execution vulnerability on the Document Generator.</span>

The issue can be tracked here: 

> Macro (jira)




### **Fix**

We have released Xray for Jira Server & DC version [6.1.2.1](https://getxraydocs.atlassian.net/wiki/display/XRAY/Xray+6.1.2.1+Release+Notes) which is available for upgrade through the Atlassian Marketplace.


## **What You Need to Do**

### **Upgrade**

You can upgrade to the latest version of Xray for Jira Server & Data Center using the Universal Plugin Manager as explained [in Updating apps](https://confluence.atlassian.com/upm/updating-apps-273875710.html). 

### **Support**

If you have questions or concerns regarding this advisory, please raise a support request [here](https://jira.xpand-it.com/servicedesk/customer/portal/2).