Atlassian Confluence Server CVE-2022-26134 being actively expoited in the wild (greynoise.io)

CVE only became public on friday and is already being actively exploited.

More info about the CVE from Atlassian here.

https://confluence.atlassian.com/doc/confluence-security-adv...

Not surprising considering this is trivial to exploit.

This was extensively covered when it first broke:

https://news.ycombinator.com/item?id=31602288

https://www.volexity.com/blog/2022/06/02/zero-day-exploitati...

(this article seems like blogspam to me)

> Atlassian has been made aware of current active exploitation of a critical severity unauthenticated remote code execution vulnerability in Confluence Data Center and Server. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or Data Center instance.

Prepare to wipe servers and start fresh!

Shoutout to Cloudflare for their quick WAF mitigation when this was discovered.