Images of Jira reference numbers being randomly attached to issues

[Scott Windus]

Hi 

Today I have had quite a view notifications in my Jira Project where an image of a Jira Issue reference is being attached to unrelated Jira issues. I have checked with the user who is apparently doing this and they have advised they haven't done it, and I believe them.

Any suggestions as to what is going on? It looks to me to be a Jira Software bug, a security breach of some sorts, or a ghost.

Thanks

[Nic Brough -Adaptavist-]

Jira doesn't have any code in it to convert text to images like that.

Could you have a look at exactly how the images are getting attached?  A screenshot of a full history entry of an update and attachment (with a couple of lines above and below it for context) would be great.  Obviously, obscure people's names or text data that isn't shareable.

[Scott Windus]

Hi Nic

History screen-shot for one where 2 were attached plus how it displays in the actual issue.

Sometimes the attachments of Issue numbers, are not even from the same project, making it even more random

[Nic Brough -Adaptavist-]

I thought it might look like that.  The "added an attachment" record you've got comes from one of three places in my experience

• The person added them (you've already ruled that out)
• An email arrived with the image.  I'd want to look at what that person was doing at the time of the attachments.  Do they ever raise or comment on issues via email?
• You have a script or automation doing this for them.  Check for listeners and services that might be updating issues

[Scott Windus]

Hi Nic

The only inbound emails I have programmed are for Defect issue types. These random attachment additions are in my Change and Requirement issue types and the only thing being added is this image of a key, not text, no added comment.  The image of the key is also unrelated to the issue it is being added to.

My Jira is basically OOTB with only one add-on application, 'Reminder for Jira'.

Thanks for your thoughts on this. I will just have to monitor the situation to see if it occurs again, as I am still unable to determine the exact cause.

[Mary Stahly]

Same thing has happened to me when viewing issues. First time was on March 31 and about 10 .png images were added (although not on every ticket I viewed). Nothing after that until it started again today. Same as Scott "sometimes the attachments of Issue numbers, are not even from the same project, making it even more random". We can't be the only two. 

[Scott Windus]

I am still seeing this randomly occur from time to time as well but oddly enough, it is only from one account.

[Joel Cook]

Someone is reporting a very similar issue in our Jira Cloud instance, as well.

The user claims they did not upload or email this image file. This appears to be completely random. The image actually looks like a clip from the title of another completely unrelated issue. This has happened multiple times to multiple users in the last 2-3 weeks. The image file is always named "image-yyyymmdd-hhmmss.png" (where yyyymmd-hhmmss is the current date-time).

[Joel Cook]

I reported this issue as to Atlassian JST-574118 Apparently this is a known bug that occurs when you past a cell from an Excel spreadsheet into the search bar. Jira then adds an image of that text into the 1st issue listed in the board you are searching. I tested this and it did in fact generate an image attachment in the 1st ticket in the board. The known bug can be found here: JRACLOUD-72383 

[Scott Windus]

Ok, sounds like an answer to this problem which can potentially be avoided in the future. Thanks for sharing.