Exploit Activity for CVE-2023-22518, Atlassian Confluence Data Center and Server, (Mon, Nov 6th)

Last week, Atlassian published an advisory for CVE-2023-22518. The vulnerability is a trivial to exploit authentication bypass vulnerability [1]. Atlassian emphasized the importance of the advisory with a quote from its CISO: “There are no reports of active exploitation at this time; customers must take immediate action to protect their instances.” On Friday, Atlassian confirmed that attackers are actively exploiting the vulnerability.

Article Link: https://isc.sans.edu/diary/rss/30376

1 post - 1 participant

Read full topic

action advisory atlassian atlassian confluence authentication authentication bypass bypass bypass vulnerability center ciso confluence confluence data center customers cve cve-2023-22518 data data center exploit exploitation nov reports server vulnerability week