Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-69725
HistoryAug 01, 2019 - 5:11 a.m.

Update jQuery to address CVE-2019-11358

2019-08-0105:11:29
security-metrics-bot
jira.atlassian.com
295

EPSS

0.024

Percentile

90.2%

The version of jQuery used in Jira before 8.2.3 was vulnerable to CVE-2019-11358. This issue was addressed by updating Jira server to use a patched & custom version of jQuery (2.2.4.7).