cancel
Showing results for 
Search instead for 
Did you mean: 

How to report potential security flaws

michaelab
Champ in-the-making
Champ in-the-making
Hi,

I'm afraid I found a potential security flaw in alfresco. What is the correct way to report, not to disclose it to the public before it gets fixed?

Regards, Michael
2 REPLIES 2

mrogers
Star Contributor
Star Contributor
JIRA please but remember to set the two security properties.   Security Level (internal) And Security Severity as appropriate.   You may not be able to see it once you have raised it.

If you can't see those properties then please email me and I'll forward your concern to the right people.

michaelab
Champ in-the-making
Champ in-the-making
JIRA offers only the Field Security Severity but not Security Level.

When you say email - since I haven't got your E-Mail-Address - do you mean a private message in this forum using the function available in your userprofile?

Regards, Michael