-
Bug
-
Resolution: Fixed
-
High
-
5.5.1
-
None
We recently upgraded our instance following your security advisory. It was discovered shortly after the upgrade that the xwork file that was vulnerable (1.13) was not upgraded to the safe version (1.17). This could have just been specific to our instance but you should check your upgrade process and see if the correct file is bundled and the update process is actually updating it.
- relates to
-
CONFSERVER-33515 ClassLoader Manipulation vulnerability
-
- Closed
-
[CONFSERVER-33729] Upgrading to 5.5.1 from 5.4.3 didn't update xwork from 1.13 to 1.17
Workflow | Original: JAC Bug Workflow v3 [ 2886943 ] | New: CONFSERVER Bug Workflow v4 [ 2980731 ] |
Workflow | Original: JAC Bug Workflow v2 [ 2794900 ] | New: JAC Bug Workflow v3 [ 2886943 ] |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: JAC Bug Workflow [ 2736358 ] | New: JAC Bug Workflow v2 [ 2794900 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2381395 ] | New: JAC Bug Workflow [ 2736358 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 2273484 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2381395 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2217116 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 2273484 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2169849 ] | New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2217116 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 1930159 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2169849 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v3 [ 1730580 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 1930159 ] |
Workflow | Original: CONF Bug Subtask WF (TEMP) [ 1688610 ] | New: Confluence Workflow - Public Facing - Restricted v3 [ 1730580 ] |