CVE-2017-18104

Summary: CVE-2017-18104 affects Atlassian Jira Webhooks. The Webhooks component in Jira versions before 7.6.7 and in 7.7.0 up to but not including 7.11.0 allows remote attackers who can observe webhook events to learn information about changes in issues that are not contained within the results o...

JQL filter for Webhooks doesn't work correctly when "Comment" and "Worklog" related events are fired - CVE-2017-18104

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-59980. panel h3. Security information The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version...