This is a public space:
For the draft, please restrict the page during creation and
remove this warning when page is published
Dear customer,
On the 18th of February 2025, Atlassian issued a Security Bulletin for Confluence and Crowd.
The Cloud versions of the applications are not affected.
What you need to know
Atlassian has released a Security Bulletin on multiple vulnerabilities, including five critical issues. Those were fixed in recent updates.
While Atlassian marks some of these issues as critical, this is not an Security advisory.
However, in some cases Atlassian still advises updating affected systems for security.
Affected Versions
| Confluence Data Center and Server |
|
| Crowd Data Center and Server |
|
What should I do?
You use Confluence Data Center and Server
If you're using one of the following versions or newer, the issues are already fixed:
|
If you're using one of the following versions:
|
|
|
Then you should check:
- If your Confluence instance runs on a case-sensitive filesystem (default on Linux), we consider the risk low and an update as optional.
- If it runs on a case-insensitive filesystem (default on Windows and macOS), we consider the risk medium and we recommend a minor update.
You use Confluence Cloud
You are not affected by this Security Advisory. No need for action.
You use Crowd Data Center and Server
If you're using the one of the following versions or newer, the issues are already fixed:
|
Otherwise, if you're using one of the following versions we assess the risk as medium and recommend a minor update:
|
|
Support
If you still have questions or concerns regarding this advisory, please contact the bitvoodoo support via support.bitvoodoo.ch.
