Confluence Server and Data Center - CVE-2022-26134 / confluence server 7.13.8

[Ndofunsu]

Hi,

On june, regarding this alert "Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability", a list of fixed versions has been provided.

I want to know if this list has updated and and if includes confluence server 7.13.8 and other server version up to 7.13.7 available on atlassian website?

Best regards,

Roger Ndofunsu

[Robert Wen_Cprime_]

You can install 7.13.8.  The advisory was released a month before 7.13.8 was released.

[Ndofunsu]

Hi Robert,

Thank you for your answer,  but just reassure me, confluence server 7.13.8
Released on 04 July 2022 is safe from "CVE-2022-26134".

Please, let me know that I can install this version 7.13.8

Best regards,

Roger

[Robert Wen_Cprime_]

Hello @Ndofunsu 

I think if you're after the fixed version (7.13.7) you should be set.