Atlassian

Atlassian Confluence Data Center and Server versions were affected by a critical vulnerability identified as CVE-2023-22527, enabling threat actors to exploit the flaw for cryptomining campaigns. Due to the template injection vulnerability, remote attackers could execute arbitrary code, leading to unauthorized cryptocurrency mining using the organization's resources. This activity not only utilized the compromised infrastructure for mining but also had the potential to disrupt operations and financials through resource exhaustion and increase in operational costs. Atlassian released patches to address the issue, however, systems not updated remained at risk.

Source: https://securityaffairs.com/167813/cyber-crime/atlassian-confluence-data-center-confluence-server-cryptocurrency-mining-campaigns.html

TPRM report: https://scoringcyber.rankiteo.com/company/atlassian

"id": "atl000083124",
"linkid": "atlassian",
"type": "Vulnerability",
"date": "8/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Atlassian',
                        'type': 'Software Company'}],
 'attack_vector': 'Template Injection Vulnerability',
 'description': 'Atlassian Confluence Data Center and Server versions were '
                'affected by a critical vulnerability identified as '
                'CVE-2023-22527, enabling threat actors to exploit the flaw '
                'for cryptomining campaigns. Due to the template injection '
                'vulnerability, remote attackers could execute arbitrary code, '
                'leading to unauthorized cryptocurrency mining using the '
                "organization's resources. This activity not only utilized the "
                'compromised infrastructure for mining but also had the '
                'potential to disrupt operations and financials through '
                'resource exhaustion and increase in operational costs. '
                'Atlassian released patches to address the issue, however, '
                'systems not updated remained at risk.',
 'impact': {'operational_impact': 'Resource Exhaustion',
            'systems_affected': ['Atlassian Confluence Data Center',
                                 'Atlassian Confluence Server']},
 'motivation': 'Financial Gain',
 'response': {'remediation_measures': ['Patches Released']},
 'title': 'Atlassian Confluence Cryptomining Campaign',
 'type': 'Cryptomining Campaign',
 'vulnerability_exploited': 'CVE-2023-22527'}