Recent security issue with Universal Plugin Manager?

[Patrick Albrecht]

Does anyone have any details about the recent security issue with the Universal Plugin Manager? It's said to be a reverse tabnabbing security vulnerability but we would like to have more details to make our own security assessment to decide if we wanna install the update or not.

[Daniel Ebers]

Hi Patrick,

UPM is formally speaking 'closed source' and on the contrary to Jira I am not 100% sure if security issues are published at all.

In case you have a valid license in your case I'd raise a support ticket with Atlassian team and ask if some details can be shared with your team regarding the specific vulnerability.

Cheers,
Daniel