---
title: "Security Advisory - March, 2022"
canonical: "https://docs.getxporter.app/space/XPORTER/1409618/Security%20Advisory%20-%20March%2C%202022"
format: markdown
---
> ⚠️ We recommend the update of Xporter for Jira Server & Data Center to the [6.9.7](https://confluence.getxray.app/display/XPORTER/Xporter+6.9.7+Release+Notes) - latest version.

# **Xporter for Jira Server and Data Center - Remote Code Execution on Templates export**

| **Summary** | <span style="color: #172b4d">Remote Code Execution on Templates export</span> |
| --- | --- |
| **Advisory Release Date** | 3/22/2022 10:00 AM CET |
| **Product** | Xporter for Jira Server & Data Center |
| **Affected on Xporter for Jira Server & Jira Data Center Versions** | **Jira 8:** 6.9.6 and earlier<br>J**ira 7:** 6.9.6-j7 and earlier |
| **Fixed on Xporter Jira Server & Jira Data Center Versions** | **Jira 8**: 6.9.7 and later<br>**Jira 7:** 6.9.7-j7 and later |

### **Summary of Vulnerability**

This advisory discloses a security vulnerability classified as **critical **that was present in Xporter for Jira Server & Data Center.** **Versions of Jira Server & Data Center affected by this vulnerability:

- 6.9.6 and earlier (fixed in 6.9.7 and later).

**Customers who have upgraded Xporter for Jira Server & Data Center to version 6.9.7 or higher ****are** **<span style="color: #000000">not affected</span>****.**

**Customers who are on any of the affected versions, upgrade your Xporter for Jira Server & Data Center installations immediately to fix this vulnerability.**

#### **Severity**

We rate the severity level of this vulnerability as **critical**, according to the scale published in [Bugcrowd’s Vulnerability Rating Taxonomy](https://bugcrowd.com/vulnerability-rating-taxonomy). The scale allows us to rank the severity as critical, high, moderate, or low.

This is our assessment and you should evaluate its applicability to your own IT environment.


#### **Description**

<span style="color: #172b4d">We detected a Remote Code Execution vulnerability on the Template export.</span>

The issue can be tracked here: 

> Macro (jira)




### **Fix**

We have released Xporter for Jira Server & DC version [6.9.7](https://confluence.getxray.app/display/XPORTER/Xporter+6.9.7+Release+Notes) which is available for upgrade through the Atlassian Marketplace.


## **What You Need to Do**

### **Upgrade**

You can upgrade to the latest version of Xporter for Jira Server & Data Center using the Universal Plugin Manager as explained [in Updating apps](https://confluence.atlassian.com/upm/updating-apps-273875710.html). 

### **Support**

If you have questions or concerns regarding this advisory, please raise a support request [here](https://jira.xpand-it.com/servicedesk/customer/portal/2).