-
Bug
-
Resolution: Fixed
-
Low
-
7.6.15, 7.13.13, 8.0.0, 8.1.2, 8.5.4, 8.8.0
-
7.06
-
19
-
Severity 3 - Minor
-
28
-
Issue Summary
Currently, Jira runs with jQuery version 2.2.4, which is susceptible to the following vulnerabilities:
https://nvd.nist.gov/vuln/detail/CVE-2020-11023
https://nvd.nist.gov/vuln/detail/CVE-2020-11022
Steps to Reproduce
-
Expected Results
We should update the version of jQuery to at least version 3.5.0, where these vulnerabilities are no longer present.
Actual Results
Jira uses jQuery version 2.2.4
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
- relates to
-
JRASERVER-72273 Public documentation for the fixes included in the jQuery custom version
- Gathering Interest
-
BBSDEV-22653 Loading...
-
MNSTR-4299 Loading...
-
MNSTR-4482 Loading...
-
MNSTR-4578 Loading...
- is cloned by
-
MNSTR-4265 Loading...