Atlassian’s Confluence hit with critical remote code execution bugs

Atlassian Confluence Data Center and Server has been hit with a critical remote code execution bug, allowing authenticated threat actors to exploit account privileges and execute arbitrary codes.

The vulnerability, tracked as CVE-2024-21683, is assigned a CVSS score of 8.3/10, and requires no user interaction with a high impact on confidentiality, integrity, and availability of the configuration service.

“This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server,” Atlassian …

account atlassian atlassian confluence atlassian confluence data center bug bugs center code code execution confidentiality confluence confluence data center critical cve cve-2024 cve-2024-21683 cvss cvss score data data center exploit high impact privileges remote code remote code execution score server threat threat actors vulnerabilities vulnerability