--- title: "Security digest: October 31, 2023" url: https://erroneo.us/security/2023-10-31/ description: "October 31, 2023 vulnerability digest: 1 brief (Confluence CVE-2023-22518: Unauthenticated Reset…); 2 CISA KEV additions (F5). What to patch and who can…" type: security-digest-day section: "Security Digest" date_published: 2023-10-31 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: October 31, 2023 1 editorial brief and 2 known exploited (cisa kev) additions. ## Take stock - Act now: Confluence CVE-2023-22518: Unauthenticated Reset to Admin . Organizations running self-managed Confluence Data Center or Server below the fixed releases, particularly any instance reachable from the internet. - Do you run any of these? F5 BIG-IP Configuration Utility. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2023-11-21. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Act now** [Confluence CVE-2023-22518: Unauthenticated Reset to Admin](https://erroneo.us/security/briefs/confluence-improper-authorization-cve-2023-22518/index.md): Any self-hosted Confluence that is reachable from the internet and not on a fixed release can be wiped and taken over by an unauthenticated request; patch or pull it offline, and Atlassian Cloud users have nothing to do. ## Known exploited (CISA KEV) - [CVE-2023-46748](https://erroneo.us/security/cve/CVE-2023-46748/index.md) F5 BIG-IP Configuration Utility: F5 BIG-IP Configuration Utility SQL Injection Vulnerability (CISA due 2023-11-21) - [CVE-2023-46747](https://erroneo.us/security/cve/CVE-2023-46747/index.md) F5 BIG-IP Configuration Utility: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability (CISA due 2023-11-21) ## Critical advisories None. --- Source page: https://erroneo.us/security/2023-10-31/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt