Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-28073

Import Results action / jsp is susceptible to XSRF

    XMLWordPrintable

Details

    Description

      NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.

      The jsp located at /views/importall_result.jsp logs users out without any confirmation (csrf logout!) and it shouldn't do so without user confirmation.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. JRACLOUD-28073 Import Results action / jsp is susceptible to XSRF

          • Medium - Medium priority issues
          • Closed

          Activity

            People

              edalgliesh Eric Dalgliesh
              dblack David Black
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: