Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. This vulnerability in Atlassian Rovo highlights potential risks for enterprise data security, particularly within ecosystems that integrate AI assistants.
https://meta-news.info/ver/atlassian-rovo-can-be-tricked-into-sending-jira-and-confluence-d…
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. This vulnerability in Atlassian Rovo highlights potential risks for enterprise data security, particularly within ecosystems that integrate AI assistants.
https://meta-news.info/ver/atlassian-rovo-can-be-tricked-into-sending-jira-and-confluence-d…