Atlassian Warns of New Critical Confluence Vulnerability Threatening Data Loss

Atlassian has warned of a critical security flaw in Confluence Knowledge Centre and Server that could final result in “sizeable information decline if exploited by an unauthenticated attacker.”

Tracked as CVE-2023-22518, the vulnerability is rated 9.1 out of a maximum of 10 on the CVSS scoring program. It has been explained as an occasion of “incorrect authorization vulnerability.”

All variations of Confluence Facts Center and Server are prone to the bug, and it has been dealt with in the next variations –

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

• 7.19.16 or afterwards
• 8.3.4 or later
• 8.4.4 or afterwards
• 8.5.3 or later, and
• 8.6.1 or later

That stated, the Australian corporation emphasized that “there is no impression to confidentiality as an attacker are not able to exfiltrate any instance information.”

No other specifics about the flaw and the exact approach by which an adversary can just take benefit of it have been built offered, possible owing to the simple fact that accomplishing so could empower danger actors to devise an exploit.

Atlassian is also urging consumers to get quick motion to safe their instances, recommending those people that are available to the community internet be disconnected until finally a patch can be used.

What is additional, users who are working variations that are outside of the aid window are encouraged to up grade to a mounted version. Atlassian Cloud web pages are not impacted by the issue.

Although there is no proof of energetic exploitation in the wild, earlier learned shortcomings in the application, such as the lately publicized CVE-2023-22515, have been weaponized by risk actors.

Uncovered this short article intriguing? Follow us on Twitter  and LinkedIn to read through extra unique articles we write-up.