JIRA 4.1.2 Patch for JIRA Security Advisory 2011-02-21

We have identified and fixed a parameter based redirection vulnerability in JIRA 4.1.2 which could allow an attacker to redirect requests. Full details of the severity, risks and vulnerabilities can be found in the JIRA Security Advisory 2011-02-21.

The patch below should be applied. Please note that all Studio instances are not vulnerable at the time of this disclosure.

Note this patch is cumulative and includes the fixes that were applied in JRA-22493,

Patch

Instructions on how to apply the patch are included in the zip file