CVE-2023-28709 - vulnerability remediated?

[Colleen Gotling]

My security team is asking for proof that this was remediated on our Confluence Cloud instance.  I am not able to find what version we are on to show them nor am I able to determine if this was a vulnerability for cloud or was it just for the on prem version?  

[Rilwan Ahmed · Accepted solution]

Hi,

CVE-2023-28709 was impacted to Confluence Data Center & Server versions. Atlassian Cloud was not impacted. 

Details is in https://www.atlassian.com/trust/data-protection/vulnerabilities and https://confluence.atlassian.com/security/security-bulletin-august-15-2023-1276870882.html

[Dan Breyen · Accepted solution]

Hi Colleen, I could be wrong, but I haven't seen specific things like this mentioned in release notes.  It might be best to open a support ticket (support.atlassian.com/contact) with more information to get an answer directly from Atlassian for something like this.

Hope that helps.

[Join]

Adel