http://confluence.atlassian.com/display/DOC/Confluence+Community+Security+Advisory+2006-01-19
Official advisory:
http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2006-01-20