Atlassian Confluence Hit by Newly Actively Exploited Zero-Day – Patch Now

Atlassian has released fixes to contain an actively exploited critical zero-day flaw impacting publicly accessible Confluence Data Center and Server instances.
The vulnerability, tracked as CVE-2023-22515, is remotely exploitable and allows external attackers to create unauthorized Confluence administrator accounts and access Confluence servers.
It does not impact Confluence versions prior to

access accounts actively exploited atlassian atlassian confluence attackers center confluence confluence data center critical cve cve-2023-22515 data data center exploited external fixes flaw impact patch server servers vulnerability zero-day zero-day flaw