CVE-2023-22518

CVSS

—

EPSS

1.000 (100.0th percentile)

CISA KEV

Added 2023-11-07, due 2023-11-28

Exploitation

No report

Public exploits

8 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards07 Nov 2023, 00:00

  Confluence to Cerber: Exploitation of ​​CVE-2023-22518

  CVE-2023-22518 is being exploited in Confluence for Cerber ransomware deployment. Read up on Huntress’ observations and mitigation guidance.

  ↗huntress.com/blog/confluence-to-cerber-exploita…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:32poc publishedpoc-in-github
2. 24 Sept, 11:50kev addedcisa-kev