Workflows for Confluence 2021-01-28

28 Jan 2021 Transition Bug Fix

The vulnerability meant that unauthorized users had the ability to transition a workflow to the next status. 

This vulnerability has been rated as P1, according to the scale published on the Common Vulnerability Scoring System (CVSS).

The vulnerability was identified by a researcher on BugCrowd on the 27 Jan 2021. Once we became aware of the issue, we found the cause by auditing the endpoint. Based on what we found, remediation actions have been taken ensure that this vulnerability is now fixed.

Based on our investigations, the vulnerability is not likely to have had any impact on you.