Atlassian Confluence Improper Authentication Vulnerability (CVC-2023-22518) Notification

Overview Recently, NSFOCUS CERT monitored that Atlassian officially fixed an improper authentication vulnerability in the Atlassian Communication Data Center and Server (CVE-2023-22518). Unauthenticated remote attackers can bypass the authentication of the target system to a certain extent by constructing malicious requests and obtain the authority to take over the server through the backend interface, achieving […]

The post Atlassian Confluence Improper Authentication Vulnerability (CVC-2023-22518) Notification appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and …

atlassian atlassian confluence attackers authentication authority backend blog bypass center cert communication confluence cve data data center emergency-response malicious notification requests server system target unauthenticated vulnerability