json hacking

Dane McAuley April 27, 2015

We're running JIRA v6.2 and when running an HP Webinspect scan we receive the following finding:

JSON Hijacking Possible (HTTPS)

Is this a known vulnerability?  Has it been addressed in future versions?

Thanks.

1 answer

0 votes
Norman Abramovitz
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 27, 2015

This is really an issue of JavaScript and therefore the browser.   I know that releases of chrome, firefox and IE did fix this issue.   The question is which browser did you use?

Suggest an answer

Log in or Sign up to answer