News for hackers. Stuff that matters.

A comment on Zero-Day Exploitation of Atlassian Confluence. Parent comment

Re:Zero-Day Exploitation of Atlassian Confluence by bombcar on Friday June 03, 2022 @01:20PM (#31611108)
And now the same link has the released update versions. And more details: https://jira.atlassian.com/browse/CONFSERVER-79000
[ Parent | on HN ]
Re:Zero-Day Exploitation of Atlassian Confluence by tyingq on Friday June 03, 2022 @02:22PM (#31611886)
Part of the fix is a patched version of xwork 1.0.3, originally released in 2005, which has had several CVEs past 1.0.3. Yikes.
[ Parent | on HN ]