Systemerror under "users/viewmyprofile.action"

[Niklas]

Hello everyone,

We have updated our Confluence to Version 8.5.4 and now if we try to visit any Profile we get a Servererror.

atlassian-confluence.log:

5:2023-12-07 15:15:21,296 INFO [http-nio-8080-exec-20] [atlassian.confluence.status.SystemErrorInformationLogger] writeToLog \nRequest Unique ID : e33f718b-bc0a-4394-abae-513cfb1ef241\n--------------------------\nJVM Stats\n--------------------------\nxmx = 8589934592\nusedNonHeap = 786906920\navailableHeap = 6326827520\navailableNonHeap = -1\nallocatedHeap = 4299161600\nfreeAllocatedHeap = 2036054528\nmaxNonHeap = -1\navailablePermGen = 0\nmaxPermGen = -1\nmaxHeap = 8589934592\nusedHeap = 2263107072\nusedPermGen = -1\nxms = 4294967296\n--------------------------\nRequest Information\n--------------------------\nURL: https://kimtst./500page.jsp\nScheme: https\nServer: kimtst\nPort: 443\nURI: /500page.jsp\nContext Path: \nServlet Path: /500page.jsp\nPath Info: null\nQuery String: null\n--------------------------\nAttributes\n--------------------------\njavax.servlet.forward.request_uri: /users/viewmyprofile.action\njavax.servlet.forward.context_path: \njavax.servlet.forward.servlet_path: /users/viewmyprofile.action\njavax.servlet.forward.mapping: org.apache.catalina.core.ApplicationMapping$MappingImpl@7522a8cb\norg.apache.catalina.AccessLog.RemoteAddr: 10.200.*.*\n__prepare_recursion_counter: 1\nstruts.actionMapping: noActionMapping\njavax.servlet.error.status_code: 500\nbrave.SpanCustomizer: SpanCustomizer(RealSpan(4ca8477f3a40a7cc/4ca8477f3a40a7cc))\ncom.atlassian.confluence.impl.profiling.DecoratorTimings: com.atlassian.confluence.impl.profiling.DecoratorTimings@1caf1d19\norg.apache.struts2.dispatcher.filter.StrutsPrepareFilter.REQUEST_EXCLUDED_FROM_ACTION_MAPPING: false\ncom.opensymphony.sitemesh.APPLIED_ONCE: true\natlas.webInterfaceContext: com.atlassian.confluence.plugin.descriptor.web.DefaultWebInterfaceContext@769f1bf4\ncom.atlassian.confluence.util.message.MessagesDecoratorFilter__already_filtered__: true\n__wrap_recursion_counter: 1\ncom.atlassian.confluence.web.filter.validateparam.RequestParamValidationFilter_already_filtered: true\natlassian.core.seraph.original.url: /500page.jsp\ncom.atlassian.labs.botkiller.BotKillerFilter: true\norg.apache.catalina.AccessLog.Protocol: HTTP/1.0\ncom.atlassian.gzipfilter.GzipFilter_already_filtered: true\nConfluence-Request-Time: 1701958521231\nstruts.valueStack: com.opensymphony.xwork2.ognl.OgnlValueStack@69b1b089\ncom.atlassian.confluence.web.ConfluenceJohnsonFilter_already_filtered: true\ncom.atlassian.seraph.auth.LoginReason: OK\nsitemesh.secondaryStorageLimit: -1\nconfluence.themecontext: com.atlassian.confluence.themes.ThemeContext@9353984\norg.apache.catalina.AccessLog.ServerPort: 443\njavax.servlet.error.message: Resource name must end with .vm, .vmd, .css or .xml\njavax.servlet.error.servlet_name: default\norg.apache.tomcat.request.forwarded: true\nbrave.propagation.TraceContext: 4ca8477f3a40a7cc/4ca8477f3a40a7cc\nbrave.servlet.TracingFilter$SendHandled: true\norg.apache.tomcat.remoteAddr: 10.200.92.128\ncom.opensymphony.sitemesh.USINGSTREAM: false\norg.apache.catalina.AccessLog.ServerName: kimtst\nB3-TraceId: 7d29145385ae4b\nloginfilter.already.filtered: true\njavax.servlet.jsp.jspException: org.apache.velocity.exception.ResourceNotFoundException: Resource name must end with .vm, .vmd, .css or .xml\njavax.servlet.error.request_uri: /users/viewmyprofile.action\ncom.atlassian.core.filters.HeaderSanitisingFilter_already_filtered: true\ncom.atlassian.prettyurls.filter.PrettyUrlsSiteMeshFixupFilter: true\norg.apache.catalina.AccessLog.RemoteHost: 10.200.*.*\njavax.servlet.error.exception: org.apache.velocity.exception.ResourceNotFoundException: Resource name must end with .vm, .vmd, .css or .xml\nos_securityfilter_already_filtered: true\ncom.atlassian.prettyurls.filter.PrettyUrlsSiteMeshFilter: true\n--------------------------\nParameters\n--------------------------\ncaused by: org.apache.velocity.exception.ResourceNotFoundException: Resource name must end with .vm, .vmd, .css or .xml\nat com.atlassian.confluence.velocity.ConfigurableResourceManager.loadResource(ConfigurableResourceManager.java:329)\n
 

[Sebastian Breitkopf]

Hi Niklas,

This behaviour seems to be intended by Atlassian to mitigate CVE-2023-22522 which was patched with Confluence 8.5.4.

According to https://confluence.atlassian.com/confkb/getting-error-resource-name-must-end-with-vm-vmd-css-or-xml-after-confluence-is-upgraded-1332805717.html you should be able to fix this system error by disabling or updating the app or pluging you're using for user profiles.

I ran into the same issue. Updating the apps fixed it for my installation today. (7.19.17 with Linchpin Intranet Suite app)

Kind regards from Berlin

[Marc -Devoteam-]

Hi @Niklas 

Welcome to the community.

I don't user server or DC anymore, but I think you might have issues related to the following KB article

https://confluence.atlassian.com/confkb/how-to-clear-confluence-plugins-cache-297664846.html 

I hope this might help you.

[Niklas]

Hi @Marc -Devoteam- 

Thankyou for you answer. I tried that unfortunately without success. 

[Marc -Devoteam-]

Hi @Niklas 

Did you try the linked option as well?

https://confluence.atlassian.com/confkb/how-to-reset-all-confluence-plugins-back-to-their-default-state-through-the-database-859509873.html 

Or try to start without plugins, see options in the following article

https://confluence.atlassian.com/confkb/how-to-manually-remove-malfunctioning-add-ons-113705118.html