youngmon/atlassian-qna huggingface dataset:
Known Confluence vulnerability
Asked by Janet Barton:

Although we upgraded Confluence yesterday, our Confluence on-premises application server was already compromised. I need help in identifying the known payload activities for servers compromised with this vulnerability.  
For clarification, this pertains to Confluence CVE-2021-26084 exploit


Answers:
author: Robert Wen_ReleaseTEAM_
body: You can see others' tales of woe in this question: [https://community.atlassian.com/t5/Confluence-questions/No-access-to-Conlfuence-Webpage-100-CPU-usage-from-quot-dbused/qaq-p/1793393?utm_source=atlcomm\&utm_medium=email\&utm_campaign=immediate_general_answer\&utm_content=topic](https://community.atlassian.com/t5/Confluence-questions/No-access-to-Conlfuence-Webpage-100-CPU-usage-from-quot-dbused/qaq-p/1793393?utm_source=atlcomm&utm_medium=email&utm_campaign=immediate_general_answer&utm_content=topic)

Steps included:

- Shut down confluence  
- Apply Bugfix patch  
- removed all cronjobs, located in /var/spool/cron/crontabs and /var/spool/cron/atjobs  
- removed suspicious files in /tmp   
- killed dbused process, via kill -9 \[pid\]  
- Start confluence


author: Daniel Ebers
body: Hi [@Janet Barton](/t5/user/viewprofilepage/user-id/4377848)

for the specific question to the payload it is hard to pinpoint it - because there could be different kinds of malware out in the wild. However, what was reported up to now was that is was some kind of crypto miner with lateral movement capabilities.

Reading what the malware is capable of there are signs it tends to "come back" (leaving some backdoors). The specific 'miner' is also reported to make connections to other systems via SSH connections - in case there is ANY sign of hack it might be needed to check connected systems, too.

If you are confident there are signs of a compromise it could be absolutely beneficial to reinstall the server and just to bring back a clean confluence installation + their attachments (alongside with configuration) back - just to prove you get a system again that you can trust.

Regards,  
Daniel


Tags: confluence-server

server
As a global Confluence admin how do I administer access to a space?
Asked by Tom Atkinson:

I am an administrator of Confluence, but I am unable to grant a user with admin access to a space. Specifically, when I go to Project Settings for the space, the "Permissions" tab is not visible.

![image.png](/t5/image/serverpage/image-id/159492iA0ED06A3F68B7A82/image-size/large?v=v2&px=999 "image.png")

The support documentation says that I need to be a Confluence Global Administrator to do this, but as far as I can tell, I am a full administrator in Confluence. Is the "Global Administrator" one level higher?


Answers:
author: Mikael Sandberg
body: Confluence is using [three different permissions](https://confluence.atlassian.com/doc/permissions-and-restrictions-139557.html): Global permissions and covers things like space creation and wether a user can log in. Space permissions determines that access to the space and what the user can do. And the last one is page restrictions, which is different then the two others.

It looks like your default space permission does not include confluence-admins (or the group you use for Confluence admins) or it doesn't give the group admin permissions, and that is why you cannot manage the space permissions.

So your only option is to find out who is admin of the space and have them add you or the Confluence admin group as admins.

comments: author: Tom Atkinson
body: Thanks, Mikael. The space admin has tried unsuccessfully to grant space admin access to the user. Is there a way to expand the confluence-admin privileges to include space administration?


author: Mikael Sandberg
body: No, that can only be done if you are on Premium or Enterprise plans, which have access to [bypass space settings](https://support.atlassian.com/confluence-cloud/docs/bypass-access-restrictions-on-a-page-with-admin-key/) for Confluence admins.

Is the space admin getting an error message when trying to add new space admins?


author: Mikael Sandberg
body: One workaround would be to create a new space and make sure that Confluence admins are space admins as well, either by changing the default space permissions, or add them to the space permissions when the space is created (I highly recommend the first option). You could then move the existing space to this new one.


author: Tom Atkinson
body: That did it! I used this article to "Recover Permissions" for the space. It seems that somehow even though the default permissions for site-admins was set correctly, the permission for that space had somehow been revoked and I had to recover access.

Thanks for timely and clear directions - this has been plaguing us for weeks!!

<https://confluence.atlassian.com/conf59/assign-space-permissions-792498609.html>


Tags: cloud

confluence-cloud
How can i add the create date/ finish date to a Confluence Task (Not Jira)
Asked by Tim Rieger:

Hello,

we use Confluence Cloud Version in our Company. I like the point that we can create simple Task in Confluence. U can give them a Due Date and a Assignee.

But

In the Task List Macro we see the option to show only Task from a specific Date till now.

Do u know how can i show the Create Date in the Task List Macro or how can i implement these? Is there already a Ticket or AddOn for it ?

Thanks for helping!


Answers:
author: Alexis Robert
body: Hi [@Tim Rieger](/t5/user/viewprofilepage/user-id/4349325) ,

since the Task List macro is bundled with Confluence, there is not much you can do interms of customizations. I don't know of an addon that can do this too.

You best option would be to create tasks as issues in Jira, and then use the Jira issue Macro in Confluence : this one can be configured with any column you need, for example the Created Date.

Let me know if this helps,

--Alexis


Tags: cloud

confluence-cloud

task
Missing favicons and emojis
Asked by Frode Aasegaard:

After upgrading to version 7.4.11 on our Server installation we are missing the default icons in our environment. Also, inserting an emoji fails when editing a page. All pictures, users and inserted on pages, are ok.

I guess this is related to the upgrade from 7.4.9 because of a security issue. The upgrade itself went fine. We tried to remove files from temp-folder and work-folder, with no luck. Still no icons from the default folder.

Any suggestions?

Thanks!


Answers:
author: Robert Wen_ReleaseTEAM_
body: You may want to try rebuilding the indexes. Instructions are here: <https://confluence.atlassian.com/confkb/how-to-rebuild-the-content-indexes-from-scratch-833941594.html>

comments: author: Frode Aasegaard
body: Thanks for this suggestion. Sorry to say it didn't work, still no icons from the folder images/icons/

If we try to open the picture/icon in the browser it says error 500. and of course shows nothing.

We were thinking it could be a permission issue, but somehow strange it works for others after the upgrade..


author: Daniel Ebers
body: Hi [@Frode Aasegaard](/t5/user/viewprofilepage/user-id/4534636)

it would not be that unusual that some users still can see the icons (for example, if they are still in a browser cache).

In a situation like this I'd recommend you would check if the files are still there and if the permissions are set correctly.  
If files are missing (favicons and stuff) you probably could restore them from the previous installation's backup - but that needs further testing I guess.

Cheers,  
Daniel

comments: author: Frode Aasegaard
body: Thanks.

I checked these things first with no luck. After a while I contacted supported and they suggested to look at the web.xml file.

The \<confluence_install\>/conf/web.xml file was somehow corrupt. After replacing this one with a copy from the install package it worked fine.


Tags: confluence-server

server
How to add a comment for the page version created?
Asked by Yagnesh Bhat:

I am trying to find the Java API that will add a comment on the "Page History" Page under the comment column. So what I am doing is when something on my macro changes, I force the page update like so:

```
pageManager.<Page>saveNewVersion(page, page1 -> page1.setBodyContent(content));
```

As expected the page gets updated with a new version.

But I want to add a comment in the "Comment" column of the "Page History" page stating something like "The page version was created because the macro content was changed". Please advise if there is any Java API I can use to achieve this.


Answers:
author: Yagnesh Bhat
body: ```
pageManager.<Page>saveNewVersion(page, page1 -> {
    page1.setBodyContent(content);
    page1.setVersionComment("Version created by the plugin");
});
```

comments: author: Kishan Sharma
body: Thanks Yagnesh for sharing the solution!


author: Alexis Robert
body: Hi [@Yagnesh Bhat](/t5/user/viewprofilepage/user-id/853330) ,

not sure if anyone here will be able to give you an answer specifically for the Java API, so I would suggest asking your question in the Atlassian Developer community, you might have more luck here : <https://community.developer.atlassian.com/c/confluence/6>

As far as I know, this is possible with the regular REST API so you should be able to do it with the Java API :

PUT /wiki/rest/api/content/{content_id}

```
{
"id": "content_id",
"title": "Page title",
"space": {"key": "SPACEKEY"},
"type": "page",
"body": {
"storage": {
"value": "Page body",
"representation": "storage"
}
},
"version": {
"message": "version comment",
"number": 2
}
}
?
```

Let me know if this helps,

--Alexis

comments: author: Yagnesh Bhat
body: [@Alexis Robert](/t5/user/viewprofilepage/user-id/1213386) , thanks for the reply. I found the way to do it from the Java API itself:

```
pageManager.<Page>saveNewVersion(page, page1 -> {
    page1.setBodyContent(content);
    page1.setVersionComment("Version created by the plugin");
});
```

Converting this to answer and also updating the same answer in the question I asked in Developer community for reference.


Tags: confluence-server

server
Number of allowable users to edit a page
Asked by Craig Marciniak:

Hello.

I have page on a Confluence site that can be updated by Anonymous users. In my testing, it seems if more than 2 Anonymous users attempt to edit the page at the same time, the third user when they click edit, gets a spinning wheel. When I research the number of allowable users that can edit a page, my searches say that 12 users can update a page at one time. However, that doesn't clarify if that's 12 licensed users, anonymous users or a mixture of both. Can someone let me know if that 12 can pertain to anonymous users or does it cap out a different number?

Thanks.


Answers:
author: Alexis Robert
body: Hi [@Craig Marciniak](/t5/user/viewprofilepage/user-id/3582221) ,

the [documentation](https://confluence.atlassian.com/doc/administering-collaborative-editing-858772086.html) for Collaborative Editing does not provide any information on a limitation for the number of anonymous users, so I would guess it's not different from logged in users.

It might be an issue with Synchrony, have you looked at the application logs when you get a spinning wheel ? It might give you more information on the issue.

Let me know if this helps,

--Alexis


author: Kishan Sharma
body: Hi [@Craig Marciniak](/t5/user/viewprofilepage/user-id/3582221)

You are right, a maximum of 12 people can edit a page at the same time. This means that people can't enter the editor if there are already 12 other people editing the page, and will need to wait until someone leaves. In your case, if the page can be edited by anonymous users, there can be max 12 people who can edit at a time irrespective of whether they are licensed users or not.


Tags: confluence-server

server
Export Space & Attachments (to move outside of Confluence)
Asked by Natasha Parker:

All of my teams' previous projects each have their own pages (and child pages) and many attachments in Confluence. I want to export all of the pages and attachments from Confluence for storage external to Confluence (in SharePoint) and then delete the pages from Confluence. I've used the PDF [export option](https://support.atlassian.com/confluence-cloud/docs/export-content-to-word-pdf-html-and-xml/), but it only includes links to the attachments still in Confluence so I am assuming those links will break if I delete the pages. How can I achieve this?


Answers:
author: Ramprasad Baliga
body: Hi [@Natasha Parker](/t5/user/viewprofilepage/user-id/1219959) - were you able to achieve this? We are now looking for something similar and wanted to try out this approach.


author: Alexis Robert
body: Hi [@Natasha Parker](/t5/user/viewprofilepage/user-id/1219959) ,

you can do this with a Space export, in Space Settings then Content Tools -\> Export.

HTML export for example will keep attachments.

You can have a look at the different options here : <https://confluence.atlassian.com/doc/export-content-to-word-pdf-html-and-xml-139475.html>

Once exported to HTML you can look at options for import in Sharepoint.

Let me know if this helps,

--Alexis

comments: author: Kishan Sharma
body: That's correct, HTML export is best suitable if you want to export and keep attachments. You can test it for a dummy space and if it works as per your requirement, you can simply export all your space as HTML and then import it in sharepoint.


Tags: cloud

confluence-cloud
Customer facing search issue when using operators
Asked by Kathryn:

when searching in the public side of our confluence page, the following searches work:

Iphone and android

"Iphone" AND "andoid"

but, if you search Iphone AND android, you receive the following error:

java.lang.IllegalArgumentException: INVALID_SYNTAX_CANNOT_PARSE: Syntax Error, cannot parse AND:  

on this error page, in the confluence search, you can look for Intelligence AND android and you will be given results with no error. Has anyone else seen this sort of an issue?


Answers:
author: Alexis Robert
body: Hi [@Kathryn](/t5/user/viewprofilepage/user-id/4516923) ,

I don't know what version of Confluence you are using, but there were similar bugs submitted previously to Atlassian : <https://jira.atlassian.com/browse/CONFSERVER-39548>

I would suggest reaching out to support to check if this is an issue from Atlassian, so that they can track this bug : <http://getsupport.atlassian.com>

You might also want to check on the application server logs if there are any errors when you're recreating this issue.

Let me know if this helps,

--Alexis

comments: author: Kathryn
body: Will do, thank you Alexis!


author: Kishan Sharma
body: Hi [@Kathryn](/t5/user/viewprofilepage/user-id/4516923) welcome to the community!

Since **AND** is a keyword in CQL, I earlier thought it might be causing the error, but that's not the case it seems. I got below results when I searched -

Iphone and android -\> Found pages containing the string.

"Iphone" AND "andoid" -\> No results and no errors.

Iphone AND android -\> Found pages containing the string.

So it could be a bug as Alexis mentioned and worth raising a ticket with [Atlassian Support](https://support.atlassian.com/contact/).

comments: author: Kathryn
body: Thank you Kishan!
Problem after having appply patch 20684
Asked by jean-yves.dellyes@lacipav.fr:

Hie community,

Juste after having apply patch 20684 on our confluence server 7.4.1 LTS, we don't see anymore our workspaces on the home page. So, documents are still there but we can't access them !

(Linux server)

Any ideas ?

Thanks,


Answers:
author: Robert Wen_ReleaseTEAM_
body: Have you thought about rebuilding the indexes? If you're sure that the upgrade didn't touch the data in the database (which I'm sure it didn't), this would be my next step.

Instructions on this link: <https://confluence.atlassian.com/confkb/how-to-rebuild-the-content-indexes-from-scratch-on-confluence-server-110035351.html>

comments: author: jean-yves.dellyes@lacipav.fr
body: Thanks everybody !

We reindex, add some memory to our oracle database server .. reboto the servers, .. a,d it works !

Thanks again


author: Alexis Robert
body: Hi [jean-yves.dellyes@lacipav.fr](/t5/user/viewprofilepage/user-id/4548978) ,

did you mean that you've applied the paatch against Atlassian CVE-2021-26084 ?

If yes, then the only thing it does is changing some parameters in a few files, it doesn't actually touch any data in the database.

So if you're seeing a change, it might be related to something else (cache on your side, etc).

Can you better describe what is happening and what is expected ?

Also, are you seeing any errors in the logs ?

Let me know if this helps,

--Alexis

comments: author: jean-yves.dellyes@lacipav.fr
body: hi, thanks for your answer !

yes the patch is the CVE-2021-26084

agree with the fact that it doesn't touch any data in the database.

No specific errors on the log since we apply the patch .. we've got the same errros than before the patch

What do you mean when you said "cache on your side" ? Do we have to reindex ? If yes, how could we do that ?

What happens exactly ? I'm not sure 'cause i'm not a Confluence user but .. the home page stay blank .. i don't see any workspace ..


author: Alexis Robert
body: If the home page is blank, can you try and look at the developer console in Chrome or Firefox ? It might give some idea on why the data is not showing.

Otherwise, look at maybe rebuilding indexes : <https://confluence.atlassian.com/confkb/how-to-rebuild-the-content-indexes-from-scratch-on-confluence-server-110035351.html>


Tags: confluence-server

cve-2021-26084

server
Is there a page size limit when importing documents into Confluence
Asked by Karl Samson:

Hi all, I'm trying to import documents generated by the Smart Config Docs plugin, but it fails if I try to import anything bigger than about 2MB!? Is there a default page size and can I increase it; within the limits of my infrastructure?


Answers:
author: Fabian Lim
body: Hi [@Karl Samson](/t5/user/viewprofilepage/user-id/3611064)

Under General configuration you can find the attachment options:

![attachment_size.png](https://community.atlassian.com/t5/image/serverpage/image-id/159489iE15F211BC18492DA/image-size/large?v=v2&px=999 "attachment_size.png")

Regards


author: Fadoua
body: [@Karl Samson](/t5/user/viewprofilepage/user-id/3611064)

What process are you using to import the docs? Because if you are trying to add them as attachments then yes there is a limitation in the attachment size in the UI that can be changed

Best,

Fadoua

comments: author: Karl Samson
body: I'm using a free plugin called SmartConfig docs to import documents into a designated page in a Space. I don't think Attachment size has anything to do with Page limitations? Could it be Apache behind Confluence?


Tags: server
How confluence can use SQL Query instead of JQL Query
Asked by Deepthi B:

how SQL queries can be used in confluence.


Answers:
author: Katerina Kovriga {Stiltsoft}
body: Hi [@Deepthi B](/t5/user/viewprofilepage/user-id/4502406) ,

We can suggest trying our app - [Table Filter and Charts for Confluence](https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=cloud&tab=overview).

You'll be able to connect the database with your Confluence instance using our [Table from CSV](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+from+CSV+macro) or [Table from JSON](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+from+JSON+macro) macros and then work with your tables with the help of the [Table Transformer](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+Transformer+macro) macro that uses AlaSQL queries.

And you may even simplify the task for your customers and use the [Table Filter](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+Filter+macro) and [Pivot Table](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Pivot+Table+macro) macros for filtration, aggregation and calculations via friendly UI.

comments: author: Deepthi B
body: Thankyou [@Katerina Kovriga {Stiltsoft}](/t5/user/viewprofilepage/user-id/1464746)


author: Alexis Robert
body: Hi [@Deepthi B](/t5/user/viewprofilepage/user-id/4502406) ,

you can use SQL queries directly on your database. If you need SQL in Confluence, you should look at an addon to do this :

* [SQL for Confluence](https://marketplace.atlassian.com/apps/1212798/sql-for-confluence-express-edition?tab=overview&hosting=server)
* [PocketQuery for Confluence](https://marketplace.atlassian.com/apps/1211199/pocketquery-for-confluence-sql-rest?tab=overview&hosting=cloud)

This way you can configure a database in Confluence and use these addons to query it.

Let me know if this helps,

--Alexis

comments: author: Deepthi B
body: Thankyou [@Alexis Robert](/t5/user/viewprofilepage/user-id/1213386)


Tags: cloud

confluence-cloud
(SQL) Error after upgrade to 7.13 (from 7.8)
Asked by Ernst,Axel:

Hello,

We've reiceved an error after trying to upgrade to 7.13 coming from 7.8

"  
Upgrade failed. Please consult the system logs for details. You will need to fix these problems, restore your database and confluence home directory to the pre upgrade state. Then retry the upgrade. Upgrade error message: Upgrade task com.atlassian.confluence.upgrade.upgradetask.DenormalisedSpacePermissionsUpgradeTask@6b5c9791 failed during the SCHEMA_UPGRADE phase due to: StatementCallback; bad SQL grammar \[DROP TRIGGER IF EXISTS denormalised_space_permission_trigger\]; nested exception is com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near the keyword 'IF'.  
"  
We're on SQL Server 2014(120) with this database, could that be why? I did revert back to before the upgrade but haven't tried a second time yet.


Answers:
author: Alexis Robert
body: Hi [@Ernst,Axel](/t5/user/viewprofilepage/user-id/4548903) ,

the upgrade fails because Confluence 7.13 is not compatible with SQL Server 2014, as you can see in the Supported Platforms page : <https://confluence.atlassian.com/doc/supported-platforms-207488198.html#SupportedPlatforms-Databases>

I would advise doing the SQL upgrade first to SQL Server 2016 and then trying again the upgrade.

Let me know if this helps,

--Alexis

comments: author: Ernst,Axel
body: Thanks Alexis,

I thought something like that. I'll upgrade them to an Azure SQL DB, no problem.


Tags: confluence-server

server

sql

update

upgrade
Docker Images?
Asked by marc:

Hello,

I have several confluence-server-instances running in docker. I just wanted to check if I can have a patch for the security issue <https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html>

However, the repository <https://hub.docker.com/r/atlassian/confluence-server/> does not seem to exist anymore.

Can you help me here?

We are using

image: atlassian/confluence-server:6.15.4-ubuntu-18.04-adoptopenjdk8  

and also an image with version 6.8.2 , where we adopted Java to openJdk - as it is recommended here: <https://confluence.atlassian.com/confkb/update-the-confluence-docker-image-to-use-oracle-jdk-829062521.html>

Can you tell me if there is a way to fix the security issue?

Thanks and kind regards

Marc


Answers:
author: Kishan Sharma
body: Hi [@marc](/t5/user/viewprofilepage/user-id/4548855) Welcome to the community.

Please find [this thread](https://community.atlassian.com/t5/Confluence-questions/how-to-perform-the-Confluence-Security-Advisory-2021-08-25-when/qaq-p/1797385?utm_source=atlcomm&utm_medium=email&utm_campaign=immediate_general_reply&utm_content=topic) where solution from Atlassian support is provided in comments.

comments: author: marc
body: thanks for the quick answer!


author: Kishan Sharma
body: Glad i could help :)


Tags: confluence-server

server