Atlassian Jira 7.0.8 < 7.13.0 Permissions Bypass In The Inline-create Rest Resource

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.2.3. It is, therefore, affected by a vulnerability which permits authenticated remote attackers to set the reporter in issues via a missing authorisation check. Note that th...

Users getting "XSRF Security Token Missing" when Creating Issues

When trying to use our JIRA instance we keep getting lots of permissions errors which makes JIRA very difficult to use. If we keep trying then eventually it works. This has been happening for about the last week or so. It's very annoying as you keep having to enter the issues of the JIRA you're...