Confluence

Security incidents tagged Confluence. Newest first.

0 Confluence incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Show 4 older incidents

Jan 16CriticalAtlassian Confluence Data Center and Server Template InjectionPatched
Atlassian Confluence Data Center and Server Patched
Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution. Added to the CISA KEV catalog on 2024-01-24. CISA lists known use in ransomware campaigns. CVE-2023-22527 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2023-22527

Nov 14HighCloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breachNo fix needed
Cloudflare internal Atlassian environment No fix needed
A suspected nation-state attacker used one access token and three service account credentials stolen in the October Okta breach, which Cloudflare had failed to rotate, to get into Cloudflare's Atlassian Confluence, Jira and Bitbucket. Cloudflare said customer data and systems were not affected.
Open incident →

Oct 31CriticalConfluence Data Center/Server reset-and-takeover bug exploited for Cerber ransomware (CVE-2023-22518)Patched
Atlassian Confluence Data Center and Server Patched
An improper authorization bug let unauthenticated attackers reset Confluence Data Center and Server and create a new admin. Within days of disclosure it was exploited to deploy Cerber ransomware. Atlassian Cloud was not affected.
Open incident →CVE-2023-22518
Oct 4CriticalConfluence Data Center/Server zero-day lets attackers create admins (CVE-2023-22515)Patched
Atlassian Confluence Data Center and Server Patched
A broken access control bug in publicly reachable Confluence Data Center and Server let outside attackers create Confluence administrator accounts. It was exploited as a zero-day, and Microsoft attributed it to the China-nexus Storm-0062. Atlassian Cloud was not affected.
Open incident →CVE-2023-22515