Is Confluence cloud vulnerable to CVE-2021-44228

[Kulwinder Singh]

Is Confluence cloud vulnerable to CVE-2021-44228

[Daniel Eads]

Hi all,

Daniel with Atlassian Support here to let you know our security team has finished its investigation. We have an official response statement here on Community, which you can access at this link.

More information can be found on our advisory page, as well as the previously-published FAQ:

• https://confluence.atlassian.com/display/SECURITY/Multiple+Products+Security+Advisory+-+Log4j+Vulnerable+To+Remote+Code+Execution+-+CVE-2021-44228
• https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html

Thanks,
Daniel Eads | Atlassian Support

[Jack Brickey]

I understand that the Security team is investigating and will report when they have completed their investigation.

[Paul Pasler]

This is the current state: https://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html

Are Cloud instances affected?

Our Security team is currently investigating the impact of the Log4j remote code execution vulnerability (CVE-2021-44228) and determining any possible impacts. 

[Jack Brickey]

Cool. Thanks for sharing here.