Atlassian Confluence Path Traversal Vulnerability (CVE-2024-21677) Notice

Overview Recently, NSFOCUS CERT detected that Atlassian issued a security announcement and fixed the directory traversal vulnerability in Confluence Data Center and Server (CVE-2024-21677), with a CVSS score of 8.3. Unauthenticated attackers ...

Confluence Remote Code Execution Vulnerability (CVE-2023-22527) Alert

Overview On January 16, NSFOCUS CERT detected that Atlassian officially released a security announcement fixing the remote code execution vulnerability (CVE-2023-22522) in Confluence Data Center and Confluence Server. This vulnerability is caused ...

Atlassian Issues Warning on Confluence Vulnerability Exploitation

Atlassian has issued a warning regarding a Confluence vulnerability that could expose your system to data destruction attacks. This vulnerability, identified as CVE-2023-22518, is an authentication bypass issue with a severity rating ...

Atlassian Confluence Data Wiping Alert

In today’s digital landscape, ensuring the security and integrity of your data is paramount. Atlassian, a prominent software company, recently issued a crucial advisory regarding Confluence, a popular collaboration and document management ...
CVSS, Tool, A number ‘10’ printed on a roughly rendered wall

Atlassian Bug now a Perfect 10: Riot of Ransomware Raids

Step #1: Get it off the Internet—Confluence Data Center and Server on-prem products perfectly pwned, so patch ...
Security Boulevard
medusa, Snowflake data breach hacker arrested

Hackers Exploit Atlassian Flaw in Cerber Ransomware Attacks

Multiple threat actors are descending on on-premises Atlassian Confluence software to exploit a critical vulnerability that was detailed and patched last week. Threat intelligence researchers from cybersecurity firms Rapid7 and GreyNoise this ...
Security Boulevard

Urgent: Patch Atlassian Confluence Now – CISA & FBI Advisory

CISA, FBI, and MS-ISAC are strongly advising network administrators to promptly apply patches to their Atlassian Confluence servers to protect against the active exploitation of a critical security vulnerability. Identified as CVE-2023-22515, ...