The DFIR Report on X: "🚨Active Exploitation🚨 ➡️CVE-2023-22527 - Confluence template injection ➡️Executed whoami ➡️Source IP: 45.61.137[.]90 ➡️UA: Opera/9.89.(Windows 95; sv-FI) Presto/2.9.181 Version/12.00 ➡️PCAP, full POST URI and more available in our AllIntel service https://t.co/RXnF6Mx8fB https://t.co/9zmlwuDzcg" / X