Atlassian CISO Warns of Critical Confluence Flaw

Atlassian is warning security teams to “take immediate action” after disclosing a critical-severity improper authorization vulnerability in its popular Confluence Server and Data Center products.

Patches are available for the flaw (CVE-2023-22518), which impacts all versions of Confluence Data Center and Server. Further details for the vulnerability were not specified, but the bug is rated 9.1 out of 10 on the CVSS v3 scale, and Atlassian is underscoring its potential impact for customers.

“As part of our continuous security assessment …

action atlassian authorization bug center ciso confluence confluence data center confluence server confluence server and data center critical cve data data center flaw patches popular products security security teams server severity teams vulnerability warning