PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne and JIRA integration update: more improvements, fewer clicks

hackerone.com | vulnerability | #bug-bounty | #workflow | #jira | #hackerone | #integration | #atlassian
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's JIRA integration gets three updates: the connector is now live on the Atlassian Marketplace, JIRA issues can be created in one click from a report, and two-way syncing is customizable per workflow.
Published
Collected

Related coverage

vulnerability · hackerone.com
Bug fixes just got a little easier; HackerOne introduces bi-directional JIRA integration
HackerOne introduces bi-directional JIRA integration: updates to JIRA issues — status, resolution, priority, assignee — automatically post as internal comments on the matching HackerOne report, keeping security and engineering teams in sync.
vulnerability · blog.viettelcybersecurity.com
CVE-2022-0540 - Authentication bypass in Seraph
The author dissects CVE-2022-0540, the Jira auth bypass in Atlassian Seraph: role resolution derives from the request URI, and one semicolon defeats the mapping, exposing privileged actions.
vulnerability · samcurry.net
Analysis of CVE-2019-14994 - Jira Service Desk Path Traversal leads to Massive Information Disclosure
CVE-2019-14994: a path traversal in Jira Service Desk lets customer-portal users reach the admin portal and read issues across all Jira projects; walks through affected versions and steps.
blog · hackerone.com
API Update Announcement: Report State Changes and Submission Comments
HackerOne expands its API for Pro and Enterprise customers with report state changes and submission comments, letting teams mirror internal workflows — e.g. auto-resolve reports when a JIRA ticket closes and notify researchers.
blog · xbow.com
XBOW Integration for Jira is now Available
Send validated XBOW findings to Jira Cloud automatically, with exploit evidence, reproduction steps, and fix guidance. Track Jira status in XBOW. Now in public preview.
research · bugcrowd.com
Why We’re Letting 60,000 Bugcrowd Security Researchers Ethically Hack Us
Atlassian launches its first public bug bounty on Bugcrowd, adding JIRA and Confluence Cloud to existing Trello and StatusPage programs, with Bugcrowd triaging submissions across 14+ product lines.
Back