Uploaded image for project: 'Jira Service Management Server and Data Center'
  1. Jira Service Management Server and Data Center
  2. JSDSERVER-11888

The Mail Handler creates tickets from incoming emails in the wrong projects

    XMLWordPrintable

Details

    • 2.6
    • Low

    Description

      The mail handler in Jira Service Management (JSM) Server and Data Center 4.22.5 incorrectly maps new incoming emails to the wrong JSM project, instead of the project linked to the mailbox the mails were sent to. If JSM is configured to process emails and create tickets in a restricted-access project, it may incorrectly create tickets in a widely accessible project, resulting in information disclosure.

      Affected version

      • 4.22.5

      Fixed versions

      • 4.22.x >= 4.22.6

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              security-metrics-bot Security Metrics Bot
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Backbone Issue Sync