403 Forbidden permission error in downloadallattachments.action

[Dominic Kim]

I receive the following error message when I attempt to perform the download all action on a Confluence page. I'm current a site admin and administrator level for my ID

Forbidden

You don't have permission to access /pages/downloadallattachments.action on this server.

This occurs for on-premise server version of Confluence 7.4.3

[Yevgen Lasman · Accepted solution]

It looks like a mitigation of CVE-2019-3398 is in place. Your application administrators should adjust application configuration rolling back changes and restart application. Then you will be able to use this functionality.

[Dominic Kim]

Hello,

Do you have more information on the rolling back changes and restarting the application?
Our instance is hosted by a third-party hosting company. Would you perform such changes or would our company's admin perform this?

Thank you,