Is Confluence 5.9.7 vulnerable for CVE-2017-7415 ?

[Deleted user]

I've been informed that customers that have Confluence 6.0.0 are vulnerable to this: https://confluence.atlassian.com/doc/confluence-security-advisory-2017-04-19-887071137.html

Should we upgrade to 6.0.7 if we have just 5.9.7?

[MattS · Accepted solution]

From that URL:

Affected Confluence versions
6.0.0 <= version < 6.0.7

So you don't have to upgrade 5.9.7

[Deleted user]

cool, thanks.