Atlassian Confluence – TheCyberThrone

Atlassian fixes DoS vulnerabilities in its Products

Atlassian releases patches for high-severity vulnerabilities in Bamboo, Bitbucket, Confluence, and Crowd. There are four vulnerabilities addressed in these products, all four allowing attackers to cause denial-of-service (DoS) conditions. The…

PravinKarthik September 19, 2024

Atlassian flaw CVE-2023-22527 exploited in Cryptomining campaigns

The critical template injection vulnerability in the Atlassian Confluence Data Center and Confluence Server is being actively exploited for cryptojacking campaigns that allow remote attackers to execute arbitrary code on…

PravinKarthik August 30, 2024

Atlassian fixes High Severity Vulnerabilities -CVE-2024-21686 & CVE-2024-21687

Atlassian has released patches for two high-severity vulnerabilities affecting its widely used products, Bamboo and Confluence. These security flaws have the potential to compromise sensitive data and disrupt operations for…

PravinKarthik July 17, 2024

Atlassian Security advisories June 2024

Atlassian has addressed multiple vulnerabilities in its Confluence, Crucible, and Jira solutions as part of June 2024 security advisory releases. Confluence Data Center and Server The first vulnerability tracked as…

PravinKarthik June 21, 2024

Atlassian Confluence fixes High Severity XSS Flaw – CVE-2024-21678

Atlassian has released a security update addressing CVE-2024-21678 with a CVSS score of 8.5, a high-severity stored cross-site scripting vulnerability impacting multiple Confluence Server and Data Center versions. This flaw…

PravinKarthik February 23, 2024

Atlassian fixes RCE in Confluence Data Center – CVE-2023-22527

Atlassian has addressed a critical vulnerability that resides in Confluence Data Center and Confluence Server, that could lead to a remote code execution. The vulnerability tracked as CVE-2023-22527 with a…

PravinKarthik January 16, 2024

Atlassian fixes critical RCE vulnerabilities in its products

Atlassian has fixed four critical vulnerabilities in its software that could result in remote code execution. The first vulnerability is CVE-2022-1471 with a CVSS score 9.8, is a Deserialization vulnerability in…

PravinKarthik December 6, 2023

Effluence Backdoor Targeting Atlassian Confluence Vulnerabilities

Source- Kaspersky Researchers have discovered a new threat called Effluence, which is a backdoor that exploits recently discovered vulnerabilities in Atlassian Confluence Data Center and Server. The Effluence malware acts…

PravinKarthik November 11, 2023