Atlassian controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile2 entries
2023
Confluence zero-day vulnerability
A serious vulnerability in Confluence was reported as remotely exploitable without authentication. Microsoft linked exploitation activity to the state-backed group Storm-0062, also known by other aliases. Atlassian issued an update and advised customers to investigate affected systems and apply remediation.
2019
DataSpii exposure involving Jira and Confluence information
Security researcher Sam Jadali reported that a data-distribution ecosystem involving DDMR and Nacho Analytics had exposed sensitive information from Jira and Confluence environments. Reports described the dissemination of data associated with numerous organizations and emphasized risks created by publicly accessible browser extensions, misconfiguration, and third-party data collection. The incident highlighted the importance of access controls and secure configuration for Atlassian deployments, but the reported mechanism was not presented as a confirmed compromise of Atlassian's own corporate systems.