Security bug on Recommended mail ?

[Service CNS]

Hello all,

Some people have received "Confluence recommendation" emails containing large extracts of private documents they were not supposed to read.

They don't the right to read/modify the page  but they receive the "Confluence recommendation mail" about this page (with the content)

So, we decided to disable "Recommended mail". 

Do you know how to solve this ?

Many thanks

CNS 

[Service CNS]

up

[Service CNS]

Hi, 

We have already disabled the notification but do you resolve this bug in the future ?..

[G subramanyam]

Hi @Service CNS welcome to the Atlassian community.

I'm sorry to hear about the bug that has sent "Confluence recommendation" emails.

At the moment, I would request your Confluence admin look and turn off the "Recommended Updates notification" (enabled/ disabled), check if your confluence has "public signup" enabled or disabled to ease the situation.

You might check this Article for the steps.

If the above step worked out, your internal team can start with RCA.