3 ms·

Atlassian Confluence Server CVE-2022-26134 being actively expoited in the wild

• f0e4c2f7 4y ago
  CVE only became public on friday and is already being actively exploited. More info about the CVE from Atlassian here. https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html https://confluence.atlassian.com/doc/confluence-security-adv...
  • jacquesm 4y ago
    That was how it was discovered in the first place: https://news.ycombinator.com/item?id=31605665 https://news.ycombinator.com/item?id=31605665
• deleted 4y ago
  [deleted]
• _pdp_ 4y ago
  Not surprising considering this is trivial to exploit.
• jacquesm 4y ago
  This was extensively covered when it first broke: https://news.ycombinator.com/item?id=31602288 https://news.ycombinator.com/item?id=31602288 https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/ https://www.volexity.com/blog/2022/06/02/zero-day-exploitati... (this article seems like blogspam to me)
• nathanaldensr 4y ago
  > Atlassian has been made aware of current active exploitation of a critical severity unauthenticated remote code execution vulnerability in Confluence Data Center and Server. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or Data Center instance. Prepare to wipe servers and start fresh!
• boiler_up800 4y ago
  Shoutout to Cloudflare for their quick WAF mitigation when this was discovered.