403 Forbidden permission error in downloadallattachments.action

Dominic Kim - DIG

I receive the following error message when I attempt to perform the download all action on a Confluence page. I'm current a site admin and administrator level for my ID

Forbidden

You don't have permission to access /pages/downloadallattachments.action on this server.

 

This occurs for on-premise server version of Confluence 7.4.3

Yevgen Lasman_v96izq

It looks like a mitigation of CVE-2019-3398 is in place. Your application administrators should adjust application configuration rolling back changes and restart application. Then you will be able to use this functionality.