Confluence remote code execution vulnerability

Risk Description

An attacker can craft a malicious request that triggers an Object-Graph Navigation Language (OGNL) expression injection. This allows the attacker to execute arbitrary code and take control of the server. Depending on the scenario, an attacker can exploit this vulnerability with or without authentication.

For details about the vulnerability, see https://avd.aliyun.com/detail?id=AVD-2021-26084.

Recommendations

1. Upgrade to one of the following secure versions: 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4, or 7.18.1.

2. If you cannot upgrade immediately, you can run the script from the mitigation section in the preceding link to mitigate this vulnerability.

If you encounter issues while applying the fix or have other questions, go to Security Center. Click "Need Security Help" to contact a technical support engineer.