Documented: Changes the link to issue tracker (Jira) to simplify things related to security
@@ -142,9 +142,12 @@ In case of problems visit our link:#further-reading[Further reading section].
[[security]]
== Security
-If you find a security issue, please report it to: security @ ofbiz.apache.org.
+* If you find a pre-auth security issue, please report it to: security @ ofbiz.apache.org.
Once proper mitigations to the security issues are complete the OFBiz team will
disclose this information to the public mailing list.
+* If you find a post-auth security issue, please https://s.apache.org/dsj2p[create a bug in our issue tracker (Jira)] .
+
+
You can find more information about security in OFBiz at
https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure[Keeping OFBiz secure]
