Atlassian CISO warns that new vulnerability can cause ‘significant data loss’
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-22515 | Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server | 9.8 | 99% | KEVRansomwarePoC | KEV |
| CVE-2023-22518 | Improper Authorization in Atlassian Confluence Data Center and Server | 9.8 | 100% | KEVRansomwarePoC | KEV |
From the original article
1 min read at therecord.media
The chief information security officer for Australian software giant Atlassian warned this week that a new vulnerability affecting their Confluence Data Center and Confluence Server products could lead to “significant data loss if exploited.” The company released an advisory on Monday night for CVE-2023-22518 — which carries a “critical” severity score of 9.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.