Exploit.CVE-2021-22205.Gen.1

[Lyle Epstein]

Hi. On our Confluence Server version 7.14.1 our anti-malware software has detected CVE-2021-22205.Gen1 exploit in the file path C:\Program Files\Atlassian\Application Data\ConfluenceFull\temp\upload_xxxxxxxx_xxxx_xxxx_xxxx_xxxxxxxxxxxx_00000099.tmp

Is there a patch for this issue?

[Andy Heinzer · Accepted solution]

Hi Lyle,

It is possible that this relates to our most recent security advisory for Confluence Server/Data Center.  Please upgrade to 7.14.7 (released today), as this contains a fix.  If you cannot upgrade right away, the advisory has mitigations steps you can apply as a temporary workaround.

Thanks

Andy

[Lyle Epstein]

Thank you. The updated code released 6/2/2022 has addressed this issue.