Atlassian Confluence Zero-Day Actively Exploited in the Wild
Atlassian Confluence Zero-Day Actively Exploited in the Wild
Threat Level
Vulnerability Report
For a detailed threat advisory, download the pdf file here
Summary
A critical zero-day flaw, identified as CVE-2023-22515, affecting Confluence Data Center and Server instances is being actively exploited. This remotely exploitable vulnerability enables external attackers to create unauthorized Confluence administrator accounts and gain access to Confluence servers.
To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.