Critical Atlassian Confluence zero-day exploited by attackers (CVE-2023-22515)

Atlassian has fixed a critical zero-day vulnerability (CVE-2023-22515) in Confluence Data Center and Server that is being exploited in the wild. “Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances,” the company said. About CVE-2023-22515 Atlassian describes CVE-2023-22515 as a critical … More →

The post …

0 day atlassian atlassian confluence attackers aware center confluence confluence data center critical customers cve cve-2023-22515 data data center don't miss exploited external hot stuff issue may rapid7 security update server vulnerability zero-day zero-day vulnerability