Systemerror under "users/viewmyprofile.action"
Asked by Niklas:

Hello everyone,

We have updated our Confluence to Version 8.5.4 and now if we try to visit any Profile we get a Servererror.

atlassian-confluence.log:

5:2023-12-07 15:15:21,296 INFO \[http-nio-8080-exec-20\] \[atlassian.confluence.status.SystemErrorInformationLogger\] writeToLog \\nRequest Unique ID : e33f718b-bc0a-4394-abae-513cfb1ef241\\n--------------------------\\nJVM Stats\\n--------------------------\\nxmx = 8589934592\\nusedNonHeap = 786906920\\navailableHeap = 6326827520\\navailableNonHeap = -1\\nallocatedHeap = 4299161600\\nfreeAllocatedHeap = 2036054528\\nmaxNonHeap = -1\\navailablePermGen = 0\\nmaxPermGen = -1\\nmaxHeap = 8589934592\\nusedHeap = 2263107072\\nusedPermGen = -1\\nxms = 4294967296\\n--------------------------\\nRequest Information\\n--------------------------\\nURL: [https://kimtst./500page.jsp\\](https://kimtst./500page.jsp\)nScheme: https\\nServer: kimtst\\nPort: 443\\nURI: /500page.jsp\\nContext Path: \\nServlet Path: /500page.jsp\\nPath Info: null\\nQuery String: null\\n--------------------------\\nAttributes\\n--------------------------\\njavax.servlet.forward.request_uri: /users/viewmyprofile.action\\njavax.servlet.forward.context_path: \\njavax.servlet.forward.servlet_path: /users/viewmyprofile.action\\njavax.servlet.forward.mapping: org.apache.catalina.core.ApplicationMapping$MappingImpl@7522a8cb\\norg.apache.catalina.AccessLog.RemoteAddr: 10.200.\*.\*\\n__prepare_recursion_counter: 1\\nstruts.actionMapping: noActionMapping\\njavax.servlet.error.status_code: 500\\nbrave.SpanCustomizer: SpanCustomizer(RealSpan(4ca8477f3a40a7cc/4ca8477f3a40a7cc))\\ncom.atlassian.confluence.impl.profiling.DecoratorTimings: com.atlassian.confluence.impl.profiling.DecoratorTimings@1caf1d19\\norg.apache.struts2.dispatcher.filter.StrutsPrepareFilter.REQUEST_EXCLUDED_FROM_ACTION_MAPPING: false\\ncom.opensymphony.sitemesh.APPLIED_ONCE: true\\natlas.webInterfaceContext: com.atlassian.confluence.plugin.descriptor.web.DefaultWebInterfaceContext@769f1bf4\\ncom.atlassian.confluence.util.message.MessagesDecoratorFilter__already_filtered__: true\\n__wrap_recursion_counter: 1\\ncom.atlassian.confluence.web.filter.validateparam.RequestParamValidationFilter_already_filtered: true\\natlassian.core.seraph.original.url: /500page.jsp\\ncom.atlassian.labs.botkiller.BotKillerFilter: true\\norg.apache.catalina.AccessLog.Protocol: HTTP/1.0\\ncom.atlassian.gzipfilter.GzipFilter_already_filtered: true\\nConfluence-Request-Time: 1701958521231\\nstruts.valueStack: com.opensymphony.xwork2.ognl.OgnlValueStack@69b1b089\\ncom.atlassian.confluence.web.ConfluenceJohnsonFilter_already_filtered: true\\ncom.atlassian.seraph.auth.LoginReason: OK\\nsitemesh.secondaryStorageLimit: -1\\nconfluence.themecontext: com.atlassian.confluence.themes.ThemeContext@9353984\\norg.apache.catalina.AccessLog.ServerPort: 443\\njavax.servlet.error.message: Resource name must end with .vm, .vmd, .css or .xml\\njavax.servlet.error.servlet_name: default\\norg.apache.tomcat.request.forwarded: true\\nbrave.propagation.TraceContext: 4ca8477f3a40a7cc/4ca8477f3a40a7cc\\nbrave.servlet.TracingFilter$SendHandled: true\\norg.apache.tomcat.remoteAddr: 10.200.92.128\\ncom.opensymphony.sitemesh.USINGSTREAM: false\\norg.apache.catalina.AccessLog.ServerName: kimtst\\nB3-TraceId: 7d29145385ae4b\\nloginfilter.already.filtered: true\\njavax.servlet.jsp.jspException: org.apache.velocity.exception.ResourceNotFoundException: Resource name must end with .vm, .vmd, .css or .xml\\njavax.servlet.error.request_uri: /users/viewmyprofile.action\\ncom.atlassian.core.filters.HeaderSanitisingFilter_already_filtered: true\\ncom.atlassian.prettyurls.filter.PrettyUrlsSiteMeshFixupFilter: true\\norg.apache.catalina.AccessLog.RemoteHost: 10.200.\*.\*\\njavax.servlet.error.exception: org.apache.velocity.exception.ResourceNotFoundException: Resource name must end with .vm, .vmd, .css or .xml\\nos_securityfilter_already_filtered: true\\ncom.atlassian.prettyurls.filter.PrettyUrlsSiteMeshFilter: true\\n--------------------------\\nParameters\\n--------------------------\\ncaused by: org.apache.velocity.exception.ResourceNotFoundException: Resource name must end with .vm, .vmd, .css or .xml\\nat com.atlassian.confluence.velocity.ConfigurableResourceManager.loadResource(ConfigurableResourceManager.java:329)\\n  
![Confluence_bug.png](https://community.atlassian.com/t5/image/serverpage/image-id/295782i8AAA4BF5C106D33A/image-size/large?v=v2&px=999 "Confluence_bug.png")


Answers:
author: Sebastian Breitkopf
body: Hi Niklas,

This behaviour seems to be intended by Atlassian to mitigate CVE-2023-22522 which was patched with Confluence 8.5.4.

According to [https://confluence.atlassian.com/confkb/getting-error-resource-name-must-end-with-vm-vmd-css-or-xml-after-confluence-is-upgraded-1332805717.html](https://confluence.atlassian.com/confkb/getting-error-resource-name-must-end-with-vm-vmd-css-or-xml-after-confluence-is-upgraded-1332805717.html%20) you should be able to fix this system error by disabling or updating the app or pluging you're using for user profiles.

I ran into the same issue. Updating the apps fixed it for my installation today. (7.19.17 with Linchpin Intranet Suite app)

Kind regards from Berlin


author: Marc - Devoteam
body: Hi [@Niklas](/t5/user/viewprofilepage/user-id/5333641)

Welcome to the community.

I don't user server or DC anymore, but I think you might have issues related to the following KB article

<https://confluence.atlassian.com/confkb/how-to-clear-confluence-plugins-cache-297664846.html>

I hope this might help you.

comments: author: Niklas
body: Hi [@Marc - Devoteam](/t5/user/viewprofilepage/user-id/3796976)

Thankyou for you answer. I tried that unfortunately without success.


author: Marc - Devoteam
body: Hi [@Niklas](/t5/user/viewprofilepage/user-id/5333641)

Did you try the linked option as well?

<https://confluence.atlassian.com/confkb/how-to-reset-all-confluence-plugins-back-to-their-default-state-through-the-database-859509873.html>

Or try to start without plugins, see options in the following article

<https://confluence.atlassian.com/confkb/how-to-manually-remove-malfunctioning-add-ons-113705118.html>


Tags: confluence-server

server