Atlassian Confluence Hit by New Actively Exploited Zero-Day – Patch NowAtlassian has released fixes to contain an actively exploited critical zero-day flaw impacting publicly accessible Confluence Data Center and Server instances.
The vulnerability, tracked as CVE-2023-22515, is remotely exploitable and allows external attackers to create unauthorized Confluence administrator accounts and access Confluence servers.
It does not impact Confluence versions prior to
Source: Atlassian Confluence Hit by New Actively Exploited Zero-Day – Patch Now (https://thehackernews.com/2023/10/atlassian-confluence-hit-by-newly.html)