Dear Community Leaders:

As we informed you on 3 June, ICANN’s Engineering and Information Technology (E&IT) team became aware of a vulnerability affecting Atlassian’s Confluence Server and Data Center products on 2 June. This vulnerability affected the ICANN Community Wiki, which was taken offline until E&IT could implement the patch provided by the vendor and verify the fix through a trusted third party. The Wiki is widely used by the ICANN Community and ICANN organization; therefore, it was mission-critical for E&IT to not only implement the patch, but verify its effectiveness through thorough testing. 

We’re pleased to tell you that the Wiki is now back online, earlier than anticipated. E&IT was able to quickly implement the patch, conduct multiple tests to ensure that the fix worked as expected, and received proof of success through using a trusted third party-provided tool. E&IT has verified that there are no indications that the Wiki was compromised as a result of the vulnerability.

Best regards,       David