Attackers Use Public Exploits to Throttle Atlassian Confluence Flaw

🗓️ 07 Jun 2022 11:21:47Reported by Elizabeth MontalbanoType

Attackers exploiting zero-day RCE flaw in Atlassian Confluence Server and Data Center, prompting urgent updates from Atlassian

Reporter	Title	Published	Views	Family All 236
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	10 Jun 202208:57	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	5 Jun 202218:23	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	10 Jun 202218:07	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	23 Nov 202405:35	–	githubexploit
GithubExploit	CVE-Confluence	13 Aug 202611:38	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202211:17	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	9 Jun 202202:11	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202206:57	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202208:58	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	16 Oct 202209:19	–	githubexploit

Source	Link
volexity	www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/
confluence	www.confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html
cisa	www.cisa.gov/uscert/ncas/current-activity/2022/06/02/atlassian-releases-security-updates-confluence-server-and-data
u7061146	www.u7061146.ct.sendgrid.net/ls/click
greynoise	www.greynoise.io/
u7061146	www.u7061146.ct.sendgrid.net/ls/click
twitter	www.twitter.com/Andrew___Morris/status/1533504231876993025
u7061146	www.u7061146.ct.sendgrid.net/ls/click
threatpost	www.threatpost.com/solarwinds-default-password-access-sales/162327/
threatpost	www.threatpost.com/solarwinds-hack-linked-turla-apt/162918/

07 Jun 2022 11:21Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.99999

SSVC