Is the HOTFIX workaround for CVE-2021-26084 still viable?

[James Waithe]

Our team is planning to upgrade the Confluence servers, but in the meantime, has there been any feedback on the effectiveness of the workaround?

[Kishan Sharma]

Hi @James Waithe Welcome to the Atlassian Community!

If you cannot upgrade your confluence instance immediately, applying the workaround script will assist in temporarily mitigating against all known vulnerable endpoints and is highly recommended. You may find some useful comments from other users regarding the workaround script on this issue.. If you have questions or concerns regarding the CVE advisory, please raise a support request at https://support.atlassian.com/contact.

[James Waithe]

Thank you @Kishan Sharma I am sure the Workaround is holding.  

My question was more about if any researchers or threat actors have tried to find a workaround "around" the workaround since it was first published. 

[Kishan Sharma]

Hopefully someone from Atlassian Team check this thread and comment on this. I would also recommend adding a comment on this issue directly so that you might get some answers.