Release 10.x

Update

This version is now compatible with the CCMA so can be migrated to Cloud

Fixes

• Fixed an issue where the option to override submissions, for single submission forms was not working as expected.
• Attachments added to form responses can now be viewed and downloaded
• The Input Field macro now correctly resolves Confluence values when using $queryparam=.

Security Update

• Fixed a security vulnerability

  Tip: We recommend upgrading to this version or later versions.

CVE-2025-15104- Third-Party Library Vulnerability Update

A vulnerability was discovered within a third party library that is used by Mosaic for Confluence.

CVE:https://nvd.nist.gov/vuln/detail/CVE-2025-15104

Library Name: commons-validator

Affected Library Version: v1.9.0

Our analysis confirms that Forms for Confluence does not use the affected components of the library, so is not vulnerable to the reported issue.

Action Taken

To minimize the risk, we have updated the version of the library that Forms for Confluence uses. We have selected a version that has no known vulnerabilities.

Recommendations

1. We always recommend updating to the latest version of Forms for Confluence to ensure you are running the latest and most secure software.

2. More information about the vulnerability can be found here https://nvd.nist.gov/vuln/detail/CVE-2025-15104

CVE-2023-33202- Third-Party Library Vulnerability Update

A vulnerability was discovered within a third party library that is used by Mosaic for Confluence.

CVE:https://nvd.nist.gov/vuln/detail/CVE-2023-33202

Library Names and affected versions: bcpkix-jdk15on-1.70, bcprov-jdk15on-1.70, bcutil-jdk15on-1.70

Our analysis confirms that Forms for Confluence does not use the affected components of the library, so is not vulnerable to the reported issue.

Action Taken

To minimize the risk, we have updated the version of the library that Forms for Confluence uses. We have selected a version that has no known vulnerabilities.

Recommendations

1. We always recommend updating to the latest version of Forms for Confluence to ensure you are running the latest and most secure software.

2. More information about the vulnerability can be found here https://nvd.nist.gov/vuln/detail/CVE-2023-33202

Fixes

• Fixed a number of issues with Checkbox groups, so they now work as expected.
• The statistics page now shows results as expected.

Updates

• Compatibility updates for Confluence 10

Fixes

• The hidden filed macro now works as expected.

Security Updates