Exploitation of Critical Confluence Vulnerability Begins

November 6, 2023 at 07:42AM GreyNoise has issued a warning about the first attempts to exploit a recent vulnerability in Atlassian Confluence Data Center and Confluence Server. The critical security flaw, CVE-2023-22518, could lead to significant data loss and affects all Confluence versions. Atlassian has released patches for the vulnerability, but has also warned that … Read more

Critical Atlassian Bug Exploit Now Available; Immediate Patching Needed

November 3, 2023 at 05:59PM Proof of concept exploit code for a critical vulnerability in Atlassian’s Confluence Data Center and Server technology is now publicly available. The vulnerability, assigned CVE-2023-22518 and rated 9.1 out of 10 in severity, poses a risk of data loss. At least 36 unique IP addresses have been observed attempting to … Read more

Atlassian Customers Should Patch Latest Critical Vuln Immediately

November 1, 2023 at 01:05PM Atlassian has discovered a critical vulnerability in its Confluence Data Center and Server platform and is advising customers to patch it immediately. The vulnerability, CVE-2023-22518, is an improper authorization vulnerability that affects on-premises versions of Confluence. This is the second critical vulnerability found in a month. Atlassian has not detected … Read more