Find the page an attachment is on.

Question

I searched the knowledge base and really couldn't find anything helpful. I am newly administrating our confluence instance and got a message from security that there was a vulnerability in one of our files:

data4744185932497248027.tmp

and the path to the suspicious file is:

root@XXX:/var/atlassian/application-data/confluence/attachments/ver003/5/181/140181505/218/202# ls -l

total 4

drwx------ 37 confluence confluence 4096 Sep  2  2021 139952218

this file has been here for 2 years and hasn't flagged since. Is there a easy way to find out which page/space this is located in to make sure it is legit?

Thanks,

Dave V

Mahesh Shinde_k4hefc · Answer

Hi @David Vanecek

As per directory structure, you are running confluence version less than 8.1

So this is ver3 attachment directory structure, you can get the content ID and find the attachment location from the below article:

Link: https://confluence.atlassian.com/conf80/hierarchical-file-system-attachment-storage-1188408715.html

Please, let me know if you have any questions or concerns.

Regards,

Mahesh Shinde

Kurt Klinner · Answer

@David Vanecek

Hi David

welcome to the Atlassian community

If you have access to your Confluence database you could tweak the select provided at https://confluence.atlassian.com/confkb/how-do-i-list-all-attachments-in-confluence-with-their-location-and-file-sizes-346325893.html (and add a clause for your specific attachment)

Let me know how it goes

Cheers

Kurt