Critical severity command injection vulnerability - CVE-2022-36804 It affects the confluence

[Moises Gamez]

Does the reported vulnerability CVE-2022-36804 affect the confluence tool?

[Dirk Ronsmans · Accepted solution]

@Moises Gamez ,

As reported in the advisory https://confluence.atlassian.com/bitbucketserver/bitbucket-server-and-data-center-advisory-2022-08-24-1155489835.html?permissionViolation=true it only affects BitBucket

Affected Versions

All versions of Bitbucket Server and Datacenter released after 6.10.17 including 7.0.0 and newer are affected, this means that all instances that are running any versions between 7.0.0 and 8.3.0 inclusive are affected by this vulnerability.

[Moises Gamez]

Thanks @Dirk Ronsmans