Release notes 1.8.3 - Cloud
Release date: Nov 18, 2024
Our team is excited to announce the release of the HTML for Confluence app, version 1.8.3.
Bug fixes
In this release, we have fixed the following SSRF (Server-Side Request Forgery) security vulnerability reported by CrowdStrike as part of the bugcrowd program.
Relative URLs in the Profile HTML data source are not properly concatenated to the configured profile host. The secret session headers can be leaked when the top domain is set to request an attacker controlled server.
Questions and feedback
Explore exciting features, pricing updates, reviews, and more on the Marketplace.
Stuck with something? Raise a ticket through our support team.
Do you love using our app? Let us know what you think here.
Credits
Thank you to our valued customers! Your incredible support and feedback inspire us to improve continuously. We appreciate your trust in HTML for Confluence!