Uploaded image for project: 'Jira Service Management Data Center'
  1. Jira Service Management Data Center
  2. JSDSERVER-14768

Upgrade moment library to 2.29.2+ as required for CVE-2022-24785 and CVE-2022-31129

XMLWordPrintable

      Hi,

      Is it possible to upgrade the moment.js library to 2.29.2  on all Jira SM versions? (It seems fixed in for Jira SW as mentioned https://jira.atlassian.com/browse/JRASERVER-75017) In JSM it is still discovered as a vulnerability.

          Form Name

            [JSDSERVER-14768] Upgrade moment library to 2.29.2+ as required for CVE-2022-24785 and CVE-2022-31129

            Marc Dacanay made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 878473 ]
            Oleksandr Tkachenko made changes -
            Remote Link Original: This issue links to "Page (Confluence)" [ 826240 ]
            Oleksandr Tkachenko made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 860842 ]
            Satej Mirpagar made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Waiting for Release [ 12075 ] New: Closed [ 6 ]
            SET Analytics Bot made changes -
            Support reference count Original: 3 New: 4
            SET Analytics Bot made changes -
            UIS Original: 11 New: 15
            Yufei Zuo made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 842044 ]
            Mingyi Yang made changes -
            Fix Version/s Original: 5.11.3 [ 106290 ]
            Fix Version/s Original: 5.4.12 [ 106143 ]
            Fix Version/s New: 5.4.13 [ 106413 ]
            Bartosz Ornatowski made changes -
            Fix Version/s New: 5.4.12 [ 106143 ]
            Fix Version/s New: 5.12.1 [ 106162 ]
            Fix Version/s New: 5.11.3 [ 106290 ]
            Fix Version/s New: 5.13.0 [ 105935 ]
            Bartosz Ornatowski made changes -
            Status Original: In Progress [ 3 ] New: Waiting for Release [ 12075 ]

              Unassigned Unassigned
              458e633c07a6 Jose Antonio Uribe
              Affected customers:
              1 This affects my team
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: