Scott Dungan closing this as invalid since it's apparently a misunderstanding on your side of the original vulnerability. Don't hesitate to reopen / add details if needed.
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.