[XRAY-7691] Remote Code Execution - Document Generator Export - Xblend Issue Tracker

Xporter

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 4.3.3
Component/s: Document Generator
Labels:
- ignore_coverage
- security_vulnerability_critical

Description

Xray for Jira Server is vulnerable to remote code execution by exploiting the Document Generator export feature.

Attachments

Issue Links

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(15 mentioned in)

Activity

People

Assignee:: Paulo Alves

Reporter:: Paulo Alves

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 21/May/21 2:59 PM

Updated:: 03/Mar/25 7:10 PM

Resolved:: 04/Jun/21 4:23 PM