Issue Summary

Users is not able to upload attachments during create issue or add to existing issue.

This is reproducible on Data Center: (yes)

Steps to Reproduce

1. Log in to Jira on tab A
2. Open a second tab B.
3. In tab B, log out of Jira, and then log back in.
4. Back in tab A, click the ‘Create’ button.
5. Assuming the ‘Create Issue’ form has an ‘Attachment’ field, try to attach a file or image. It will fail.

Expected Results

The attachment would be uploaded successfully.

Actual Results

The attachment upload will failed with the following error

The problem is that there is a <meta id="atlassian-token" name="atlassian-token" content="…."> HTML element in the page. Normally it’s value is identical to the ‘atlassian.xsrf.token’ cookie value, but when Jira logs out and back in on another tab, its value becomes stale.

The insidious thing is that ‘Create Issue’ from a stale tab does work. It’s only the attachment upload that uses the < meta> attribute and fails.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available.