High · published October 21, 2025
🚨 A high-severity DoS vulnerability in Confluence Data Center could turn your bustling collaboration hub into a ghost town! 🔥 Think of this vulnerability like a fire alarm that goes off at the worst possible time — it pulls everyone out of the room, but for no reason, leaving your team stranded and unable to work together. Just like a building’s fire exit should be clear, your servers need to be ready to keep services available! An attacker can disrupt access to the Confluence Data Center, causing significant downtime that could leave your team unable to collaborate or access essential documentation. This can lead to productivity losses, frustrated users, and potentially even financial repercussions for your organization. With this vulnerability, your services could be temporarily or indefinitely rendered unavailable!
Think of this vulnerability like a fire alarm that goes off at the worst possible time — it pulls everyone out of the room, but for no reason, leaving your team stranded and unable to work together. Just like a building’s fire exit should be clear, your servers need to be ready to keep services available! This DoS vulnerability allows an attacker to exploit certain conditions within Confluence Data Center version 2.0 and above, leading to a disruption in service availability for users connected to the network. Essentially, this can prevent legitimate users from accessing resources they need.
An attacker can disrupt access to the Confluence Data Center, causing significant downtime that could leave your team unable to collaborate or access essential documentation. This can lead to productivity losses, frustrated users, and potentially even financial repercussions for your organization. With this vulnerability, your services could be temporarily or indefinitely rendered unavailable! To protect your services, upgrade your Confluence Data Center to the latest version immediately or at least to one of the supported fixed versions: 8.5.25 or greater for 8.5, 9.2.7 or greater for 9.2, or 10.0.2 or greater for 10.0. Don't leave your system vulnerable longer than necessary! You've got this! Follow these steps and you’ll have Confluence running smoothly in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| atlassian/confluence_data_center | ≥ 8.5.0, < 8.5.25 | 8.5.25 |
| atlassian/confluence_data_center | ≥ 9.2.0, < 9.2.7 | 9.2.7 |
| atlassian/confluence_data_center | ≥ 10.0.0, < 10.0.2 | 10.0.2 |
| atlassian/confluence_server | ≥ 8.5.0, < 8.5.25 | 8.5.25 |
| atlassian/confluence_server | ≥ 9.2.0, < 9.2.7 | 9.2.7 |
| atlassian/confluence_server | ≥ 10.0.0, < 10.0.2 | 10.0.2 |