The Mail Handler creates tickets from incoming emails in the wrong projects

The mail handler in Jira Service Management (JSM) Server and Data Center 4.22.5 incorrectly maps new incoming emails to the wrong JSM project, instead of the project linked to the mailbox the mails were sent to. If JSM is configured to process emails and create tickets in a restricted-access project, it may incorrectly create tickets in a widely accessible project, resulting in information disclosure.

Affected version

• 4.22.5

Fixed versions

• 4.22.x >= 4.22.6