Atlassian Releases Patch for Confluence Zero-Day Flaw Exploited in the Wild

Tracked as CVE-2022-26134, the issue is similar to CVE-2021-26084 — another security flaw the Australian software company patched in August 2021. Both relate to a case of Object-Graph Navigation Language (OGNL) injection.