TLDR InfoSec · MISCELLANEOUS

CENTER AND SERVER

confluence.atlassian.com3 min read

Summary from the TLDR InfoSec newsletter

Atlassian has released fixes to contain an actively exploited critical zero-day flaw impacting publicly accessible Confluence Data Center and Server instances. The vulnerability, tracked as CVE-2023-22515, is remotely exploitable and allows external attackers to create unauthorized Confluence administrator accounts and access Confluence servers.