Atlassian Confluence Data Center and Server Broken Access Control Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 05/10/2023. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| confluence data center | ≥ 8.0.0, < 8.3.3≥ 8.4.0, < 8.4.3≥ 8.5.0, < 8.5.2 | 8.3.38.4.38.5.2 |
| confluence server | ≥ 8.0.0, < 8.3.3≥ 8.4.0, < 8.4.3≥ 8.5.0, < 8.5.2 | 8.3.38.4.38.5.2 |
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free