Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Atlassian Confluence data-wiping vulnerability exploited

Help Net Securityby @zeljkazorz ()2 min read2 · 1 read
Read at helpnetsecurity.com
Analyze CVE-2023-22518 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-22518
Tags
cve-2023-22518vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-22518
Improper Authorization in Atlassian Confluence Data Center and Server
9.8100%KEVRansomwarePoC
KEV

From the original article

2 min read at helpnetsecurity.com

Threat actors are trying to exploit CVE-2023-22518, a critical Atlassian Confluence flaw that allows unauthenticated attackers to reset vulnerable instances’ database, Greynoise is observing . The Shadowserver Foundation has also seen 30+ IP addresses testing for the flaw in internet-facing Confluence installations.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.