Customers created via the Customer Portal do not trigger an email verification

2020-04-0104:07:50

security-metrics-bot

jira.atlassian.com

JSON

In affected versions of Jira Service Desk Server and Data Centre, it was possible to create customers with fake email addresses via the Customer Portal. This is now resolved with email verification.

Affected versions:

version < 3.16.13
4.0.0 ≤ version < 4.5.3
4.6.0 ≤ version < 4.7.0

Fixed versions:

3.16.13
4.5.3
4.7.0

CPENameOperatorVersion
jira service management server and data centerlt3.16.13
jira service management server and data centerlt4.7.0
jira service management server and data centerlt4.5.3
jira service management server and data centerle4.5.5

Name	Operator	Version
jira service management server and data center	lt	3.16.13
jira service management server and data center	lt	4.7.0
jira service management server and data center	lt	4.5.3
jira service management server and data center	le	4.5.5

JSON