nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

📌 Multiple Products Security Advisory - CVE-2022-26136, CVE-2022-26137

Dave LIAO

This week Atlassian released an advisory detailing new CVEs affecting multiple Atlassian products, including Jira and Confluence.

Learn more: https://confluence.atlassian.com/security/multiple-products-security-advisory-cve-2022-26136-cve-2022-26137-1141493031.html

🌤 Atlassian Cloud products are not affected, per the advisory.

Another day, another CVE, am I right? Stay diligent, and happy patching. 🔒

Comments

Robert Wen_Cprime_

There was another CVE released that won't affect as many people, but if affected, you should pay attention.

CVE-2022-26138 affects those that have Questions for Confluence installed. Older versions created an account with a hardcoded password. Uninstalling the app won't delete the account.

Details are here: https://confluence.atlassian.com/doc/questions-for-confluence-security-advisory-2022-07-20-1142446709.html

Dave LIAO

@Robert Wen_Cprime_ good highlight, thanks for mentioning that! 💪

Taranjeet Singh

Thank you, @Dave LIAO and @Robert Wen_Cprime_ for sharing the infirmation about these security vulnerabilities.

Dave LIAO

@Taranjeet Singh - anytime, we've got to protect our users!

Robert Wen_Cprime_

You're welcome, @Taranjeet Singh ! Happy to help!

Welcome!

It looks like you're new here. Sign in or register to get started.