Confluence Server and Data Center - CVE-2022-26134 / confluence server 7.13.8

Question

Hi,

On june, regarding this alert "Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability", a list of fixed versions has been provided.

I want to know if this list has updated and and if includes confluence server 7.13.8 and other server version up to 7.13.7 available on atlassian website?

Best regards,

Roger Ndofunsu

Robert Wen · Answer

You can install 7.13.8.  The advisory was released a month before 7.13.8 was released.

Ndofunsu · Answer

Hi Robert,

Thank you for your answer,  but just reassure me, confluence server 7.13.8
Released on 04 July 2022 is safe from "CVE-2022-26134".

Please, let me know that I can install this version 7.13.8

Best regards,

Roger

Robert Wen · Answer

Hello @Ndofunsu

I think if you're after the fixed version (7.13.7) you should be set.