Atlassian Warns of New Critical Confluence Vulnerability Threatening Data Loss

Atlassian has warned of a critical security flaw in Confluence Knowledge Centre and Server that could final result in “sizeable information decline if exploited by an unauthenticated attacker.”

Tracked as CVE-2023-22518, the vulnerability is rated 9.1 out of a maximum of 10 on the CVSS scoring program. It has been explained as an occasion of “incorrect authorization vulnerability.”

All variations of Confluence Facts Center and Server are prone to the bug, and it has been dealt with in the next variations –

✔ Approved Seller From Our Partners

Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).

➤ Get Mullvad VPN with 12% Discount

• 7.19.16 or afterwards
• 8.3.4 or later
• 8.4.4 or afterwards
• 8.5.3 or later, and
• 8.6.1 or later

That stated, the Australian corporation emphasized that “there is no impression to confidentiality as an attacker are not able to exfiltrate any instance information.”

No other specifics about the flaw and the exact approach by which an adversary can just take benefit of it have been built offered, possible owing to the simple fact that accomplishing so could empower danger actors to devise an exploit.

Atlassian is also urging consumers to get quick motion to safe their instances, recommending those people that are available to the community internet be disconnected until finally a patch can be used.

What is additional, users who are working variations that are outside of the aid window are encouraged to up grade to a mounted version. Atlassian Cloud web pages are not impacted by the issue.

Although there is no proof of energetic exploitation in the wild, earlier learned shortcomings in the application, such as the lately publicized CVE-2023-22515, have been weaponized by risk actors.

Uncovered this short article intriguing? Follow us on Twitter  and LinkedIn to read through extra unique articles we write-up.