Atlassian JIRA is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks other attacks are also possible. Versions prior to Atlassian JIRA 4.2.2 are vulnerable.

Updates are available. Please see the references for more information.

• http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2011-02-21
• http://www.atlassian.com/software/jira/
• https://www.securityfocus.com/bid/46461

---

Updated on 2015-03-25