json hacking

[Dane McAuley]

We're running JIRA v6.2 and when running an HP Webinspect scan we receive the following finding:

JSON Hijacking Possible (HTTPS)

Is this a known vulnerability?  Has it been addressed in future versions?

Thanks.

[Norman Abramovitz]

This is really an issue of JavaScript and therefore the browser.   I know that releases of chrome, firefox and IE did fix this issue.   The question is which browser did you use?