Exploit.CVE-2021-22205.Gen.1

Question

Hi. On our Confluence Server version 7.14.1 our anti-malware software has detected CVE-2021-22205.Gen1 exploit in the file path C:\Program Files\Atlassian\Application Data\ConfluenceFull	emp\upload_xxxxxxxx_xxxx_xxxx_xxxx_xxxxxxxxxxxx_00000099.tmp

Is there a patch for this issue?

Andy Heinzer · Accepted Answer

Hi Lyle,

It is possible that this relates to our most recent security advisory for Confluence Server/Data Center.  Please upgrade to 7.14.7 (released today), as this contains a fix.  If you cannot upgrade right away, the advisory has mitigations steps you can apply as a temporary workaround.

Thanks

Andy