Lucene search

K
atlassian[email protected]JSWSERVER-15095
HistoryOct 25, 2016 - 7:44 a.m.

XSRF Security Token Missing when clicking on Contact an administrator

2016-10-2507:44:15
jira.atlassian.com
11

h3. Summary

Clicking on the “Contact an administrator to perform this action.” results in XSRF Security Token Missing.

Tested with :

Chrome Version 54.0.2840.59 (64-bit)

Firefox 49.0

h3. Steps to Reproduce

Configure Outgoing Mail

Enable Contact Administrators Form from General Configurations

Create a Scrum Project with a board

Change the workflow of the project so that the Simplified Workflow option will be enabled on the Columns page

!image-2016-10-25-16-04-57-091.png!

Create a new user without any admin privileges.

Assign this user as a Board Administrators from configure Board > General

Login as the new user

Go to configure Board > Column

Click on “Contact an administrator to perform this action.” !image-2016-10-25-16-09-53-391.png!

h3. Expected Results

User should be able to see the “Contact an administrator” form. 
h3. Actual Results

!screenshot-1.png|thumbnail!
{quote}
Your browser has not provided any parameters at all and your input has been lost. Press back now to try and resend the data. This is most likely caused by a bug in the browser. FireFox 3.6.0 have been known to exhibit this behavior.
For more information see this bug report [http://jira.atlassian.com/browse/JRA-20696]
JIRA could not complete this action due to a missing form token.
You may have cleared your browser cookies, which could have resulted in the expiry of your current form token. A new form token has been reissued.
Request URL: /jira6413/secure/ContactAdministrators.jspa
{quote}

Affected configurations

Vulners
Node
atlassianjira_software_data_centerRange6.7.12
OR
atlassianjira_software_data_centerRange7.2.2
OR
atlassianjira_software_data_centerRange6.4.14
OR
atlassianjira_software_data_centerRange7.2.3
OR
atlassianjira_software_data_centerRange8.5.4
OR
atlassianjira_software_data_centerRange8.20.10