https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 An improper authorization bug let unauthenticated attackers reset Confluence Data Center and Server and create a new admin. Within days of disclosure it was exploited to deploy Cerber ransomware. Atlassian Cloud was not affected. en Tue, 07 Nov 2023 00:00:00 GMT https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518#2023-11-07-58504e63 Tue, 07 Nov 2023 00:00:00 GMT critical <p>Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518): CISA adds CVE-2023-22518 to the KEV catalog</p> https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518#2023-11-06-683d43f6 Mon, 06 Nov 2023 00:00:00 GMT critical <p>Confluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518): Atlassian raises the CVSS score to 10 after active exploitation and Cerber ransomware deployments</p> https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518 https://pwn.watch/i/atlassian-confluence-improper-authorization-cve-2023-22518#2023-10-31-b9bbb24a Tue, 31 Oct 2023 00:00:00 GMT critical <p><a href="https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html">Source</a></p>