Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-34310

Upgrade to Application Links 4.2.4, SAL 2.12.2+

    XMLWordPrintable

Details

    Description

      We have vulnerability in application links:
      https://jira.atlassian.com/browse/JRA-38918

      Bumping applinks to 4.2.4 and SAL to 2.10.20 will fix the problem. Product should implement IFRAME page capability in their login page provided by LoginUriProvider.

      Attachments

        Issue Links

          is caused by

          Bug - A problem which impairs or prevents the functions of the product. JRACLOUD-66120 Bruteforce Attack via Applinks Servlet

          • Medium - Medium priority issues
          • Closed

          Activity

            People

              richatkins Richard Atkins
              gtanczyk Grzegorz Tanczyk (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: