CVE-2019-1158 is resolved in jira 8.5?

[JooHyun Park]

Hi, 

I'm asking after looking at the guide below, can I say that the security issue has been solved in jira 8.5? Is the upper version resolved from Jira 8.3?

https://community.atlassian.com/t5/Jira-articles/CVE-2019-11581-Critical-Security-Advisory-for-Jira-Server-and/ba-p/1128241

Thanks in advance

[Nic Brough -Adaptavist- · Accepted solution]

Think of it this way - why would a later version deliberately remove a critical security fix?

Apologies if that sounds a bit snarky, but it was the shortest way to put it without a boring essay question.  Every version after the ones Atlassian say fixes were released in should incorporate the fix, as they're based on the fixed versions.  The fixes might eventually be removed, but only when they're no longer needed!