Atlassian Confluence Zero-Day Actively Exploited in the Wild

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

A critical zero-day flaw, identified as CVE-2023-22515, affecting Confluence Data Center and Server instances is being actively exploited. This remotely exploitable vulnerability enables external attackers to create unauthorized Confluence administrator accounts and gain access to Confluence servers.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.