News for hackers. Stuff that matters.

A comment on Even the FBI says you need to patch this Atlassian Confluence bug. Parent comment

Re:Even the FBI says you need to patch this Atlassian Conflu... by dotty- on Wednesday October 18, 2023 @11:52AM (#37930463)
Atlassian mentions in their original advisory[0] that Cloud is not vulnerable. But Atlassian usually just... leaves it at that. No clarification on if Cloud was ever vulnerable in the past or whether there was any evidence of exploitation attempts on Cloud customers. Something I wish they would provide more details on as my company is also an Atlassian customer.

[0]: https://confluence.atlassian.com/security/cve-2023-22515-pri...

[ Parent | on HN ]
Re:Even the FBI says you need to patch this Atlassian Conflu... by sullivanmatt on Wednesday October 18, 2023 @01:13PM (#37931655)
In all of these advisories there has never once been a mention of cloud being vulnerable. I think it's safe to assume cloud runs a similar, if not identical, codebase, and that these issues are simply patched there first before vulnerability announcements are published. But that's the type of thing no company is ever going to be willing to say in public.
[ Parent | on HN ]
Re:Even the FBI says you need to patch this Atlassian Conflu... by mschuster91 on Wednesday October 18, 2023 @02:33PM (#37932763)
Someone in here claimed recently that the Cloud products were forked many years ago, which sounds believable - there's tons of little stuff that only works on either Cloud or on-prem.
[ Parent | on HN ]