2 ms·
Microsoft: Chinese-backed hackers exploiting Atlassian zero-day vulnerability
- gunapologist99 3y ago"Microsoft said it observed in-the-wild abuse of the maximum rated 10.0 vulnerability, tracked as CVE-2023-22515, since September 14, some three weeks before Atlassian’s public disclosure on October 4. A bug is considered a zero-day when the vendor — in this case Atlassian — has zero time to fix the bug before it is exploited." Archive link: https://archive.ph/UfFlz https://archive.ph/UfFlz Slashdot discussion: https://it.slashdot.org/story/23/10/11/1843211/state-backed-hackers-are-exploiting-new-critical-atlassian-zero-day-bug https://it.slashdot.org/story/23/10/11/1843211/state-backed-... Atlassian advisory: https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html https://confluence.atlassian.com/security/cve-2023-22515-pri... (https://archive.ph/YBv5a https://archive.ph/YBv5a)