Patching service desk vulnerability without upgrading?

Question

Hello,

About a month ago we decided not to renew our support & maintenance plan for JSD because we were moving to the cloud version.

We received an email from Atlassian about the need to upgrade JSD and Confluence because of a vulnerability. Is there an option to patch this vulnerability without upgrading?

Alexis Robert · Accepted Answer

Hi @Cameron Salhany ,

for both security issues, there are workarounds/mitigations that you can take to fix these without upgrading.

Follow the steps described here :

* for Jira : https://confluence.atlassian.com/adminjiraserver/jira-data-center-and-jira-service-management-data-center-security-advisory-2021-07-21-1063571388.html
* for Confluence : https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html

Let me know if this helps,

--Alexis