nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

cross-site scripting vulnerability

Mark Amos

I recently read about two vulnerabilities in Confluence: CVE-2015-8398 and CVE-2015-8399 that were apparently fixed in version 5.8.17.

Were these vulnerabilities in the SaaS version of the product, or only the on-site/company hosted version of the product?

Accepted answers

Nic Brough -Adaptavist-

They were on some releases of Cloud, but Cloud is updated regularly and frequently, and it was upgraded well before these vulnerabilities were announced.

All comments

Nic Brough -Adaptavist-

They were on some releases of Cloud, but Cloud is updated regularly and frequently, and it was upgraded well before these vulnerabilities were announced.

Mark Amos

Thanks for the quick reply, Nic!

Do the cloud version and the in-house version share the same version/release numbering scheme?

Nic Brough -Adaptavist-

It's not identical, because the Cloud versions need some tweaks that take them away from the main branch. But those tweaks are purely to do with running it as a Cloud service. You'll see different build numbers (and Cloud versions will have the old "OD" in there to indicate that they're Cloud), but if someone says "Confluence 5.8.17", then it doesn't matter if it's Cloud or Server, it'll be the same (ok, until someone adds add-ons...)

Mark Amos

Ahh. Thanks for clearing that up!

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

cloud

confluence-cloud