youngmon/atlassian-qna huggingface dataset:
in regards to Confluence Security Advisory - 2021-08-25
Asked by Jason Ferris:

Hello,

Quick question. We do do not have this checkbox checked in our Confluence regarding the vulnerability. Does this mean the temporary workaround does not have to be implemented or should it be ran regardless? We are not able to update Confluence at this time but will in the future here.

Just checking before I shrug this one off. If I need to implement the temporary workaround regardless, I can do that.

Thank you!


Answers:
author: Malcolm Ninnes
body: Hey there [@Jason Ferris](/t5/user/viewprofilepage/user-id/2747054)

Atlassian recommends running the workaround script even if 'Allow people to sign up to create their own account' is disabled. There are several endpoints identified that expose Confluence to CVE-2021-26084, so applying the workaround script will temporarily mitigate against the known vulnerable end points until you can upgrade to a version that fixes this permanently.

We've reworded the advisory ([Confluence Security Advisory CVE-2021-26084 - OGNL injection - 2021-08-25](https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html)) to remove any ambiguity.

Hope this helps!

comments: author: Kian Stack Mumo Systems
body: Thanks for following up [@Malcolm Ninnes](/t5/user/viewprofilepage/user-id/3405833)!


author: Jason Ferris
body: [@Malcolm Ninnes](/t5/user/viewprofilepage/user-id/3405833) Thank you very much for the confirmation! I will go ahead and implement the workaround.


author: Kian Stack Mumo Systems
body: My reading of the vulnerability would be that you do not need to worry if the feature is not enabled, but I would double check that before deciding not to upgrade. Several people have asked the same question on this [ticket](https://jira.atlassian.com/browse/CONFSERVER-67940), so I would add yourself as a watcher to see any response from Atlassian.

comments: author: Jason Ferris
body: [@Kian Stack Mumo Systems](/t5/user/viewprofilepage/user-id/853673) Thank you! Seems like you do have to run workaround even if not checked per Malcolm.


author: Vedant Kulkarni
body: [@Kian Stack Mumo Systems](/t5/user/viewprofilepage/user-id/853673)Does this vulnerability issue have an impact on Confluence running behind the VPN? Some of the customers have not exposed their Confluence publicly.


author: Kian Stack Mumo Systems
body: [@Vedant Kulkarni](/t5/user/viewprofilepage/user-id/1734051),   

I would still perform the upgrade. The security vulnerability is less likely to exploited if your instance is behind a firewall, but it is still a big vulnerability that should be taken care of.  


Tags: confluence-server

cve

cve-2021-26084

server
CVE-2021-26084 - Mitigation by Turning off "Allow people to sign up to create their account"
Asked by David Klebanoff:

With respect to this vulnerability, do we have to run the mitigation script at all if we have "Allow people to sign up to create their account" turned off ?


Answers:
author: Malcolm Ninnes
body: Atlassian recommends running the workaround/mitigation script even if '*Allow people to sign up to create their own account*' is disabled. There are several endpoints identified that expose Confluence to CVE-2021-26084, so applying the workaround script will temporarily mitigate against the known vulnerable end points until you can upgrade to a version that fixes this permanently.

We've reworded the advisory ([Confluence Security Advisory CVE-2021-26084 - OGNL injection - 2021-08-25](https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html)) to remove any ambiguity.


author: Kian Stack Mumo Systems
body: My reading of the vulnerability would say no, but I would defer to Atlassian if they say something different. A lot of people have the same question on this [ticket](https://jira.atlassian.com/browse/CONFSERVER-67940). I would add yourself as a watcher to see if Atlassian responds with confirmation.


Tags: confluence-server

cve

cve-2021-26084

server
100% CPU utilisation on Confluence server.
Asked by Jeffrey Manning:

I noticed high CPU utilisation on my Confluence server yesterday. I managed to resolve the issue by upgrading the EC2 instance from a m5a.large to a m5a.xlarge. However, when I tried to undo the changes, I started experiencing the same problem.

I would like to revert to my previous configuration, but I'm not having much luck troubleshooting the cause of this issue.

The screenshot provided shows the resources being used by the two confluence processes running.![Screenshot (3).png](/t5/image/serverpage/image-id/157560i3ECEDE58A08B7F2A/image-size/large?v=v2&px=999 "Screenshot (3).png")


Answers:
author: Jeffrey Manning
body: I've managed to solve the issue by increasing the heap size within the setenv.sh script.


Tags: confluence-server

server
Want my file as a link not a thumbnail
Asked by Renee Bochman:

I don't seem to have any options than a thumbnail when inserting a PDF on a page. I want a link to the file. How can I change that?  


Answers:
author: W
body: Yeah, this has been a serious drawback of confluence workflows forever. It's seriously a bad deficiency. Basically I have two options for a story: 1) link the attachments in the description, in which case you get these giant screenshots in your text making the ticket look much longer than it actually is and difficult to story point or 2) link the attachments to the ticket, in which case there is no way to reference them in the text.

Tickets are complicated, some have 20 screenshots. There are already 3 feature request tickets for this, please make it a priority, "link to attachment" functionality in Jira comments and description.


author: Brant Schroeder
body: [@Renee Bochman](/t5/user/viewprofilepage/user-id/4530785) Welcome to the community

You would have to upload the PDF to Confluence and then add it as a link to the page in order to display as a link. If you drag and drop or insert it as an attachment it will only display as a thumbnail.

comments: author: Renee Bochman
body: I did that and it still only showed up as a thumbnail. From what I read it's because I have the new editor and not the old one and the new editor is lacking basic functionality. It is has been under development for a year to reinstate the old editors capabilities. ? Confluence is not what it used to be.

The other workaround was to add the attachment widget which is a horrible workaround.

Although I am super open if I am wrong - it was the article that was suggested after I posted this.


Tags: cloud

confluence-cloud
For analytics, how to check who all are viewing, creating and editing confluence pages
Asked by bitcoin man:

Have two questions.

We are slowly implementing Confluence across the enterprise, how do we know who all are viewing, creating, editing pages.

To track kpi's I need to see it from a holistic analytics perspsective that shows the number of users, and their names who are creating and editing and viewing pages.

Second question

Right now even on a random page, when i click under views, i only see the message "two unique views" or "one unique views" Not able to see who's viewing.

Need to know what plugin do I need to install to get the functionality.


Answers:
author: Mattia _bitvoodoo ag_
body: Hello bitcoin man,

depending on the hosting and Confluence plan you have, Atlassian's Analytics is included and provides the information you are looking for: <https://support.atlassian.com/confluence-cloud/docs/view-analytics-to-see-how-content-is-performing/>

If you are on a plan that doesn't include this built-in analytic, I can recommend you our app

<https://www.bitvoodoo.app/apps/viewtracker-analytics-for-confluence/>

For alternatives, you can search for example with the search term Analytics in the Atlassian Marketplace.

Kind regards  
Mattia


Tags: confluence-server

server
Can I connect specific cell from Excel with Confluence?
Asked by Szymon Ko?odziej:

Hello everyone,  

I've got some cells from Excel that I'd like to use in my doc on Confluence, however I only need specific ones, and my question is if I can choose specific cells whose values might be updated in the future and these values will be updated on Confluence aswell, if not then maybe there is some option to paste a whole table in Confluence and then pick these values so in the future I just could paste a whole table so it could get updated automatically.  

Thanks in advance.  

<br />

<br />


Answers:
author: Katerina Kovriga {Stiltsoft}
body: Hi [@Szymon Ko?odziej](/t5/user/viewprofilepage/user-id/4530534) ,

I suggest browsing the Marketplace - there should be some apps (maybe even free ones) that allow you to import CSV files into Confluence.

Our app (that is [Table Filter and Charts for Confluence](https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=cloud&tab=versions)) focuses mainly on table filtration, data aggregation and visualization, calculations in tables, etc. But it also provides the [Table from CSV](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+from+CSV+macro) macro that allows you to output a table from CSV or TSV data source - a URL or an attached file. Every update made to the source CSV file will be immediately reflected in Confluence.

Furthermore the table recreated from the CSV file can be also filtered, aggregated and visualized like a regular manually created table.

comments: author: Szymon Ko?odziej
body: Thank you \<3


Tags: cloud

confluence-cloud

ms-excel
JS Button to delete label and add label
Asked by JONATHAN RUSSELL:

Hello,

I have pages created with label "ESP". At some point I will want to archive the page. To do this I want to remove "ESP" and add "Archived".

Below is code that allows a new label to be added OK through my testing, but the removal does not work.

*** ** * ** ***

```
<!DOCTYPE html> 
<html><head></head>
<body> 

<button onclick="runScript()">Archive Project</button>
<p><div id="result"></div></p> 

<script type="text/javascript"> 
function runScript() { 

var archived = "archivedtest"; 
AJS.Labels.addLabel(archived, AJS.params.pageId, AJS.params.contentType); 

var current = "esp"; 
var labels = $(".aui-label-split-main"); ?
 ? if( labels[i].innerHTML.search(current) == esp ) {
 ? ? ? ? AJS.Labels.removeLabel( $(labels[i]), AJS.params.pageId, AJS.params.contentType);
}

}; 

</script>

</body></html>
```

Please can someone advise on what is wrong with the code and how I can remove "ESP" label?

Thanks!


Answers:
author: Brant Schroeder
body: [@JONATHAN RUSSELL](/t5/user/viewprofilepage/user-id/4530566) welcome to the Atlassian community

If you are truely archiving the page I would recommend leaving the labels. The page will be the archive section that most will not be able to access. You may also want those labels if you restore it. You might consider only adding a label if you want it but I would think you would want to retain the old labels for true archival purposes.


Tags: confluence-server

label

macro

server
Restricting knowledge base articles to certain unlicensed users
Asked by Iana:

I have Jira Service Desk (JSD) to treat our clients requests and have a Confluence Knowledge Base linked so that clients can look for help articles from the Service Desk Customer Portal. Our clients don't have Jira Service nor Confluence licenses.

Most Knowledge Base articles can be viewed by all our clients (provided they are signed in) but some articles should only be viewed by certain clients.

I've restricted the pages to the client groups that are allowed to view them.

When I search the pages in the client portal as a user (unlicensed) that's part of the restricted access groups, the title of the page appears under suggested articles, but when I try to open it, a message appears saying I don't have access to that page.

Any ideas on why this could be happenning?

Thanks in advance.


Answers:
author: Kishan Sharma
body: Hi [@Iana](/t5/user/viewprofilepage/user-id/4087588) If you are adding a restriction to the page, it means that the permissions are given to licensed users. In your case, it seems that the user is unlicensed, and so they are not able to access the page.

comments: author: Iana
body: Hi [@Kishan Sharma](/t5/user/viewprofilepage/user-id/554991)

Thanks for your prompt reply. Do you know if there is any way to restrict access to some clients without them being licensed users?   
For example, could I have a knowledge base/space that's accessible to all my clients (unlicensed users) and a knowledge base/space that's accesible only to clients (also unlicensed) that are part of a certain group?

Thanks


author: Kishan Sharma
body: Hi [@Iana](/t5/user/viewprofilepage/user-id/4087588) Unfortunately this is not possible. If you are setting up permissions to users it basically means the users can use confluence and will count towards a license. Refer [understanding the user count for your license](https://confluence.atlassian.com/doc/managing-your-confluence-license-313467774.html#ManagingyourConfluenceLicense-usercountUnderstandingtheusercountforyourlicense).

If my answer was useful, you can accept it so that you can help other community members having similar query.


Tags: server
How to find empty pages
Asked by Khloe Salmon:

Hi all

I'm trying to do a major clean up and I keep coming across very old pages which are empty. I've found a page that shows me how I can bring up a list of when pages were last modified, but it doesn't seem to be able to differentiate if it's empty.

Has anyone been able to find a way around this?

Thank you!

Khloe


Answers:
author: Alexis Robert
body: Hi [@Khloe Salmon](/t5/user/viewprofilepage/user-id/4479810) ,

you could try using SQL queries for this, I think looking for pages with the smallest size should give interesting results. Using [this page](https://confluence.atlassian.com/confkb/how-to-find-the-largest-confluence-pages-by-storage-size-in-the-database-800862464.html) from the Confluence documentation, this query should return the 100 smallest pages in Confluence :

    SELECT s.spacekey, c.title, LENGTH(bc.body)FROM BODYCONTENT bcJOIN CONTENT c ON bc.contentid = c.contentidJOIN SPACES s ON c.spaceid = s.spaceidWHERE c.prevver IS NULL AND c.contenttype IN ('BLOGPOST','PAGE')ORDER BY LENGTH(bc.body) ASC LIMIT 100; 

Let me know if this helps,

--Alexis

comments: author: Khloe Salmon
body: Thank you so much Alexis, this is perfect! :)


Tags: confluence-server

server
Use Table Transformer as Input to JQL Query
Asked by Emily Berg:

Hello,

I have a table of issues that I would like to use as the input to a JQL query - essentially trying to do this:

![2021-08-25_11-50-59.png](/t5/image/serverpage/image-id/157526iC8729E4595E420B0/image-size/large?v=v2&px=999 "2021-08-25_11-50-59.png")

I need a way to concatenate / sum all of the rows together into a single value:

INS-20218, INS-20217, INS-58952, INS-14935

The add the "Key in (" prefix

Then use the result as the input to the JQL. Is this possible?

Thanks,

Emily


Answers:
author: Katerina Kovriga {Stiltsoft}
body: Hi [@Emily Berg](/t5/user/viewprofilepage/user-id/4210574) ,

I'm afraid, this case is not possible to implement.

The result of the Table Transformer macro will be always a table of some kind, it won't serve as an input (variable) for the JQL filter.

comments: author: Emily Berg
body: Thank you for the response [@Katerina Kovriga {Stiltsoft}](/t5/user/viewprofilepage/user-id/1464746) . Would you have suggestions other than the use of a table transformer to accomplish this use case? Or do you know if the JQL macro doesn't support this type of input?

Emily


author: Katerina Kovriga {Stiltsoft}
body: I assume your JQL Filter comes from something similar to [this](https://community.atlassian.com/t5/Confluence-questions/Confluence-Variables-in-modified-JQL-macro/qaq-p/1134291) and [this](https://community.atlassian.com/t5/Confluence-questions/Can-I-use-a-variable-with-a-macro-I-am-trying-to-create-a-custom/qaq-p/203566) threads, so you are able to put plain text and variables inside its body.

Or maybe the macro comes from another 3rd party app?

We've got the idea of your case but can't come up with any solution.


author: Emily Berg
body: I had not seen those posts so thanks for sharing the links [@Katerina Kovriga {Stiltsoft}](/t5/user/viewprofilepage/user-id/1464746)

Implementation looks a bit more complex than I had hoped but I will take a look. Thanks for the responses.


Tags: confluence-server

jql

macro

server

table-transformer
Microsoft OneDrive for Business Addon Does Not Work
Asked by Nicholas Molina:

Hi. It seems the add-on only works in publisher view. Once the page is published, the add-on fails to load the document and renders only the URL instead of the embed. This seems to be a common issue and has been reported a few times but so far I haven't seen any answers.

Thanks


Answers:
author: Alex Adland
body: [@Nicholas Molina](/t5/user/viewprofilepage/user-id/612261) I found this last week <https://jira.atlassian.com/browse/CONFCLOUD-71970> as I was experiencing the same issues as you, does this explain what you are experiencing?

comments: author: Shannon S
body: Hi [@Nicholas Molina](/t5/user/viewprofilepage/user-id/612261),

Can you confirm if the case Alex shared is the same issue you're experiencing?

If not, we'd like to look at it in support, if you can [raise a support ticket.](https://support.atlassian.com/contact) If you have any trouble, please let me know!

Take care,

Shannon


author: Nicholas Molina
body: I suppose it is, if the macro is being retired and the new smart link is supposed to show a preview or present a clean link.

Neither the old macro and smart link functionality work. In preview for both it will display the document but when you publish it only publishes the ugly URL.

A prettified URL would work as well instead of the preview. Ideally, the new method would allow you to choose preview or pretty URL/link.

Thanks,

Nick


author: WH Louis Bouchard
body: I'm seeing the same behavior as [@Nicholas Molina](/t5/user/viewprofilepage/user-id/612261) is reporting here.

I haven't found another thread on this, but would appreciate any pointers or updates.

This is a significant blocker issue for some of the work we were planning, using shared Excel sheets published to Confluence.

Thanks,

LB


author: chris_voulgaropoulos
body: Any update on this?


author: Brant Schroeder
body: [@Nicholas Molina](/t5/user/viewprofilepage/user-id/612261) I am not able to replicate the issue you are having. I am escalating to Atlassian so they can take a look. You might also think about submitting a support issue <https://support.atlassian.com/contact/>


Tags: atl-rvw

cloud

confluence-cloud
Has anyone else after setting up cloud received this email spam?
Asked by Keith Sottung:

After setting up user in our Confluence Cloud instance, a few of my coworkers received spam email. Is this normal?

*** ** * ** ***

The spam email say it is from "CST Wroktato Bot. It contains a "Join them now" button. Seriously concerning.

The sender's email:

noreply+3f5e7164fe419c05c391e582e19096c13fcf03f50313d67a0400ca7b@am.atlassian.com


Answers:
author: Keith Sottung
body: The email was not spam. Found out later it was sent by our Migration Manager who set up a shared space to help us manage our server to cloud migration.


author: Fabian Lim
body: Hi [@Keith Sottung](/t5/user/viewprofilepage/user-id/1301095)

Based on previous posts, the noreply@am.atlassian.com address is a valid Atlassian email address. As others have already noted this address is primarily used by services such as Atlassian Access (previously known as Identity) in regards to

* user account creation,
* invitations,
* user verification,
* when other users join your Cloud site,
* API token creation,
* and/or password resets.

This address can also be used by other Atlassian Cloud services, such as in Confluence in regards to watcher notifications.

I hope this helps to clarify the usage here.

Thanks


Tags: cloud

confluence-cloud
Tool for collecting page reports
Asked by ??????? ?????????:

Please tell me a tool, perhaps a commercial plug-in with which you can make a report on certain pages in the form of "Page name", "User, who made the last changes (Not the author, but the user who made the changes)", "Date of change"?


Answers:
author: Katerina Kovriga {Stiltsoft}
body: Hi [@??????? ?????????](/t5/user/viewprofilepage/user-id/2070698) ,

We can suggest trying our app - [Table Filter and Charts for Confluence](https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=server&tab=versions) app and its [Table Excerpt/Table Excerpt Include](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+Excerpt+and+Table+Excerpt+Include+macros) macros.

The macros work similar to the Page Properties and Page Properties Report macros but allow you to collect multiple-row tables and show the following page meta data:

* **page**
* parent page
* space
* labels
* excerpt
* author
* **last modifier**
* created
* **updated**

Maybe this will help your case.

comments: author: ??????? ?????????
body: [@Katerina Kovriga {Stiltsoft}](/t5/user/viewprofilepage/user-id/1464746)

Hey! When using the macros you specified, tables must be added to the pages from which the report is collected. Without adding tables, if, for example, they are not needed on the pages of the report, so I understand it is impossible to collect in any way when using these macros?

As a result, an extra column is displayed from the pages from which the report is collected, can you at least somehow hide it in the final table?

![64564.png](https://community.atlassian.com/t5/image/serverpage/image-id/157628i9B70485618D0DEA5/image-size/large?v=v2&px=999 "64564.png")


author: Katerina Kovriga {Stiltsoft}
body: Yes, you are right - there will be an additional column.

To hide it, use the [Table Filter](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+Filter+macro) macro:

* Wrap your Table Excerpt Include into the Table Filter macro
* Go to the Settings -\> Filters tab and check the Hide columns option
* Go to the Filtration tab -\> Set filters' default values and choose the last unnamed column to hide

Or you may use the Table Transformer macro:

* Wrap your Table Excerpt Include into the [Table Transformer](https://docs.stiltsoft.com/display/public/TFAC/How+to+use+Table+Transformer+macro) macro
* Type in your custom SQL query where you may list all the columns you want to display: SELECT T1.'Page', T1.'Last modifier', T1.'Created', T1.'Updated', T1.'Author' FROM T\*

Hope this helps.


author: ??????? ?????????
body: [@Katerina Kovriga {Stiltsoft}](/t5/user/viewprofilepage/user-id/1464746)

Thank you!

The solution helped!


Tags: confluence-server

server
Calendar
Asked by alefa:

Hi is there a way to combine due dates from ea board or card into one calendar?


Answers:
author: Katrin Anger
body: [@alefa](/t5/user/viewprofilepage/user-id/3545004)

yes, if you enable the Calendar Power-Up in your board, you can see the due cards from a calendar view.

comments: author: Aarhan_Sharma
body: use printable calendar for managing your time and work activities[.](http://scheduleidea.com/)