Exploit / PoCcriticalExploited in the wild

Critical Atlassian Confluence zero-day exploited by attackers (CVE-2023-22515)

Help Net Securityby @helpnetsecurityOct 7, 2023 · 14:27 UTC (Oct 7, 2023)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-22515 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-22515 CVE-2021-26084

Tags: cve-2023-22515 cve-2021-26084 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-26084	Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability	9.8	100%	KEVRansomwarePoC	Aug 30, 2021 KEV Nov 3, 2021
CVE-2023-22515	Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server	9.8	99%	KEVRansomwarePoC	Oct 4, 2023 KEV Oct 5, 2023

Indicators of compromise

auto-extracted · verify before use · export allAll

Type	Indicator	Context
domain	atlassian.net	ble anonymously. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to

From the original article

2 min read at helpnetsecurity.com

Atlassian has fixed a critical zero-day vulnerability (CVE-2023-22515) in Confluence Data Center and Server that is being exploited in the wild.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.