Security bug on Recommended mail ?

Question

Hello all,

Some people have received "Confluence recommendation" emails containing large extracts of private documents they were not supposed to read.

They don't the right to read/modify the page  but they receive the "Confluence recommendation mail" about this page (with the content)

So, we decided to disable "Recommended mail".

Do you know how to solve this ?

Many thanks

CNS

Service CNS · Answer

up

Service CNS · Answer

Hi,

We have already disabled the notification but do you resolve this bug in the future ?..

G subramanyam · Answer

Hi @Service  CNS welcome to the Atlassian community.

I'm sorry to hear about the bug that has sent "Confluence recommendation" emails.

At the moment, I would request your Confluence admin look and turn off the "Recommended Updates notification" (enabled/ disabled), check if your confluence has "public signup" enabled or disabled to ease the situation.

You might check this Article for the steps.

If the above step worked out, your internal team can start with RCA.