[XPORTER-2958] Blind SQL injection at Audit Log - Xblend Issue Tracker

Xporter

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: Release 5.7.0
Fix Version/s: Release 6.3.0
Component/s: Audit Log, Security
Labels:
- security_vulnerability_critical

Sprint:
R6.3.0 Sprint 3
Requirement Status:

UNCOVERED

Description

Jira users can exploit Xporter Audit Log by Server-Side Injection - Blind SQL Injection.

Attachments

Issue Links

mentioned in: Page Loading...; Page Loading...; Page Loading...

Activity

People

Assignee:: Rui Rodrigues

Reporter:: Rui Rodrigues

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 04/Dec/19 2:07 PM

Updated:: 16/Apr/24 2:15 PM

Resolved:: 28/Apr/20 3:41 PM

Time Tracking

Estimated:

Not Specified

Remaining:

0m

Logged:

1d 3h 30m