Community
Q&A
Confluence
Questions
Advice on CVE-2021-3618 (alpaca) and CVE-2022-41742 (nginx)

Advice on CVE-2021-3618 (alpaca) and CVE-2022-41742 (nginx)

BitScan has reported discovering our Confluence Server is vulnerable to CVE-2021-3618 and CVE-2022-41742. We can find no mention of these CVEs on the Atlassian Support site. What action, if any, do we need to take?

We are currently using nginx version 1.18, and are in the process of upgrading our Confluence Server instance to version 7.19.16 in response to the latest Atlassian Security Bulletin (re CVE-2023-22518).

1 answer

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

0 votes

I am not seeing anything either. You could reach out to Atlassian to see if they have any further recommendations?

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Thank you, Kian. I submitted a support ticket.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Was this helpful?

Thanks!

Confluence

DEPLOYMENT TYPE

SERVER

VERSION

7.19.16

Forums

Q&A

Community resources

Support

Top groups

Community resources

Support

Learn

Community resources

Support

Events

Community resources

Support

Advice on CVE-2021-3618 (alpaca) and CVE-2022-41742 (nginx)

1 answer

Comments for this post are closed

Was this helpful?

Thanks!

DEPLOYMENT TYPE

VERSION

TAGS

Atlassian Community Events