-
Bug
-
Resolution: Fixed
-
Highest
-
8.5.16
-
17
-
Severity 2 - Major
-
548
-
Issue Summary
Importing a site.xml or space.xml file into Confluence 8.5.16 fails with the error "java.io.InvalidClassException: Unauthorized deserialization attempt"
Steps to Reproduce
In Confluence 8.5.16 import a site or space
- Place the export.xml file into the local restore/site or restore/space folder
- Start the import
The import will fail, however, some data is written to the database causing a second attempt to fail due to existing data in it.
Expected Results
For the site or space to fully import (the same works in Confluence 8.5.15)
Actual Results
The import will fail and the below exception is thrown in the atlassian-confluence.log file:
2024-10-10 16:36:56,482 INFO [ConfluenceBackupRestoreManager:thread-1] [impl.backuprestore.restore.RestoreService] doRestore SPACE restore [1245185] completed
2024-10-10 16:36:56,484 WARN [ConfluenceBackupRestoreManager:thread-1] [confluence.impl.backuprestore.ConfluenceBackupRestoreManager] updateJobStateAfterCompletion Backup restore job BackupRestoreJob{id=1245185, jobOperation=RESTORE, jobScope=SPACE, jobState=PROCESSING, createTime=2024-10-10T19:36:30Z, startProcessingTime=2024-10-10T19:36:30Z, finishProcessingTime=null, cancelTime=null, owner='admin', whoCancelledTheJob='null', errorMessage='null'} failed: java.lang.IllegalArgumentException: java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.io.InvalidClassException: Unauthorized deserialization attempt; com.atlassian.confluence.internal.relations.dao.RelationEntity
-- url: /c8516/rest/api/backup-restore/restore/space | userName: admin | referer: http://localhost:28516/c8516/plugins/servlet/backup-and-restore/restore | traceId: 07e9daf0e27d2b36
com.atlassian.confluence.backuprestore.exception.BackupRestoreException: java.lang.IllegalArgumentException: java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.lang.IllegalArgumentException: java.io.InvalidClassException: Unauthorized deserialization attempt; com.atlassian.confluence.internal.relations.dao.RelationEntity
at com.atlassian.confluence.impl.backuprestore.restore.RestoreService.doRestore(RestoreService.java:177)
at com.atlassian.confluence.impl.backuprestore.restore.SpaceRestoreService.doRestoreSynchronously(SpaceRestoreService.java:31)
at com.atlassian.confluence.impl.backuprestore.BackupRestoreJobRunner.runJobSynchronously(BackupRestoreJobRunner.java:72)
at com.atlassian.confluence.impl.backuprestore.ConfluenceBackupRestoreManager.runJobAndUpdateJobProperties(ConfluenceBackupRestoreManager.java:271)
at com.atlassian.confluence.impl.backuprestore.ConfluenceBackupRestoreManager.processJobsFromTheQueue(ConfluenceBackupRestoreManager.java:250)
Caused by: java.io.InvalidClassException: Unauthorized deserialization attempt; com.atlassian.confluence.internal.relations.dao.RelationEntity
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
