nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Does Confluence server 7.13.7 use Apache Commons Text (v 1.5-1.9), per CVE-2022-42889?

Tony Simon

Is Apache Commons Text used in Confluence server 7.13.7? If so, how can we remediate? Thank you!

Accepted answers

Srinatha Tondihal

Hi @Tony Simon ,

Welcome to Atlassian community.

Confluence 7.13.7 uses commons-text-1.8.jar. At this stage there’s no indication whether arbitrary code execution is possible and security team at Atlassian is already investigating this. So please await for an official announcement from Atlassian .

Thanks,

Srinath T

All comments

Srinatha Tondihal

Hi @Tony Simon ,

Welcome to Atlassian community.

Thanks,

Srinath T

Priya Ayyadevara

Hi Srinatha,

Is there an update on this ?

Cheers

Priya

Srinatha Tondihal

Hi @Priya Ayyadevara ,

Can you please open a support ticket for this.

Thanks,

Srinath T

cdenboer

Why not here so anybody can learn from it?

cdenboer

I opened a case and received the message that there is nothing found by Atlassian that confluence is vulnerable.

David Pasternak

Is it really needed that every customer has to create a support ticket for an official Bug? Wouldn't it be better, when Atlassian post a message for ALL?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

confluence-server