CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Exploited in the Wild

In the wild exploitation has begun for a recently disclosed, critical severity flaw in Atlassian Confluence Data Center and Server

Background

On January 16, Atlassian published an advisory for a critical flaw in its Confluence Data Center and Confluence Server products that was assigned a maximum CVSSv3 score of 10:

CVEDescriptionCVSSv3CVE-2023-22527Atlassian Confluence Data Center and Server Template Injection Vulnerability10.0

At the time of original publication, no in-the-wild exploitation has occurred. However, as of January 22, exploitation attempts …