|
Release date |
|
|---|---|
|
Release type |
maintenance |
|
Highlights |
Security updates & Bugfixes |
📝 Summary
Security and Bug Fix Release focusing on SSRF protection, cryptographic improvements, and critical bug fixes for Jira 11 compatibility.
✨ Improvements
-
Security Enhancements:
-
Implemented SSRF (Server-Side Request Forgery) protection for the Remote Action feature, preventing unauthorized access to internal or private network addresses by default.
-
Upgraded cryptographic implementation for API tokens and passwords from AES-ECB to AES-GCM, ensuring unique ciphertexts for identical values and providing integrity protection.
-
Introduced a transparent migration path that automatically upgrades legacy encrypted credentials to the new secure format upon first use.
-
-
Maintenance:
-
Performed a comprehensive dependency check and updated project libraries to address known vulnerabilities and ensure stability.
-
🐛 Bug Fixes
-
Jira 11 Compatibility: Resolved a critical issue where the "Create Issue" post function failed when setting the JSM "Customer Request Type" field by name.
-
Parser Functions: Fixed
fieldHistory()andpreviousValue()functions to correctly handle and return values for the Assignee field when multiple users share the same display name. -
User Interface: Corrected a broken UI element for page enumeration on the Automation Rules page, restoring proper pagination and navigation.