3 ms·
Confluence – Critical unauthenticated remote code execution vulnerability
- yabones 4y agoThe discoverers of the vulnerability posted this write-up: https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/ https://www.volexity.com/blog/2022/06/02/zero-day-exploitati... This looks like a bad one, folks. Their advice is "turn off your confluence server until a patch is available".
- seizethegdgap 4y agoTurn off external access to your Confluence server. Doesn't look like they got ours before I got to it, thankfully.
- lamontcg 4y agohttps://news.ycombinator.com/item?id=31601976 https://news.ycombinator.com/item?id=31601976 https://news.ycombinator.com/item?id=31602288 https://news.ycombinator.com/item?id=31602288