Hundreds of companies’ internal data exposed: The Confluence Cloud misconfiguration

One misconfiguration, hundreds of companies, thousands of dollars in bounties

Atlassian Confluence is a web-based software application that allows teams to collaborate and share knowledge in a centralized platform. It is used by thousands of organizations for creating, organizing, and sharing documents, meeting notes, project plans, and other types of content.

In this article, I will describe how a misconfiguration in Confluence Cloud caused (and is still causing) the exposure of internal and sensitive information of various organizations and companies. …

articles bug bounty cloud cloud misconfiguration companies confluence cybersecurity data data exposed exposed hacking internal misconfiguration web security