-
Bug
-
Resolution: Fixed
-
Highest
-
8.5.16
-
17
-
Severity 2 - Major
-
548
-
Issue Summary
Importing a site.xml or space.xml file into Confluence 8.5.16 fails with the error "java.io.InvalidClassException: Unauthorized deserialization attempt"
Steps to Reproduce
In Confluence 8.5.16 import a site or space
- Place the export.xml file into the local restore/site or restore/space folder
- Start the import
The import will fail, however, some data is written to the database causing a second attempt to fail due to existing data in it.
Expected Results
For the site or space to fully import (the same works in Confluence 8.5.15)
Actual Results
The import will fail and the below exception is thrown in the atlassian-confluence.log file:
2024-10-10 16:36:56,482 INFO [ConfluenceBackupRestoreManager:thread-1] [impl.backuprestore.restore.RestoreService] doRestore SPACE restore [1245185] completed
2024-10-10 16:36:56,484 WARN [ConfluenceBackupRestoreManager:thread-1] [confluence.impl.backuprestore.ConfluenceBackupRestoreManager] updateJobStateAfterCompletion Backup restore job BackupRestoreJob{id=1245185, jobOperation=RESTORE, jobScope=SPACE, jobState=PROCESSING, createTime=2024-10-10T19:36:30Z, startProcessingTime=2024-10-10T19:36:30Z, finishProcessingTime=null, cancelTime=null, owner='admin', whoCancelledTheJob='null', errorMessage='null'} failed: java.lang.IllegalArgumentException: java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.io.InvalidClassException: Unauthorized deserialization attempt; com.atlassian.confluence.internal.relations.dao.RelationEntity
-- url: /c8516/rest/api/backup-restore/restore/space | userName: admin | referer: http://localhost:28516/c8516/plugins/servlet/backup-and-restore/restore | traceId: 07e9daf0e27d2b36
com.atlassian.confluence.backuprestore.exception.BackupRestoreException: java.lang.IllegalArgumentException: java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.io.InvalidClassException: Unauthorized deserialization attempt; com.atlassian.confluence.internal.relations.dao.RelationEntity
at com.atlassian.confluence.impl.backuprestore.restore.RestoreService.doRestore(RestoreService.java:177)
at com.atlassian.confluence.impl.backuprestore.restore.SpaceRestoreService.doRestoreSynchronously(SpaceRestoreService.java:31)
at com.atlassian.confluence.impl.backuprestore.BackupRestoreJobRunner.runJobSynchronously(BackupRestoreJobRunner.java:72)
at com.atlassian.confluence.impl.backuprestore.ConfluenceBackupRestoreManager.runJobAndUpdateJobProperties(ConfluenceBackupRestoreManager.java:271)
at com.atlassian.confluence.impl.backuprestore.ConfluenceBackupRestoreManager.processJobsFromTheQueue(ConfluenceBackupRestoreManager.java:250)
Caused by: java.io.InvalidClassException: Unauthorized deserialization attempt; com.atlassian.confluence.internal.relations.dao.RelationEntity
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
| Form Name | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
[CONFSERVER-98204] Importing a site or space into Confluence 8.5.16 fails with error "java.io.InvalidClassException: Unauthorized deserialization attempt"
Hi,
Do you know when Confluence 8.5.17 version will be available to download?
This issue has been fixed in newer versions (see top) - I have tried importing spaces into 8.9.7 and there was no problems.
Hi 79bc1a6e7b3e et al
This critical issue is now open for relatively long.
Can you estimate a date for resolution? This would be important for us to plan a migration.
Best Regards,
Vitor
Does anyone know if this bug is present in the latest non-LTS release? We are planning a large merge next weekend, so this is critical.
Hi 79bc1a6e7b3e
Any update on the above issue, we had just upgraded from 8.5.14 to 8.5.16. and its a huge blocker when importing spaces at the moment.
Regards
Hi 79bc1a6e7b3e
Any chance to get jar with the fix? Thank you in advance, this is a huge blocker for us.
A fix for this issue is available in Confluence Server and Data Center 8.5.17. Upgrade now or check out the Release Notes to see what other issues are resolved.