Rovo prompt injection can expose Jira and Confluence data to outside servers

60/100

Two security firms independently found ways to make Atlassian's Rovo assistant collect Jira or Confluence data accessible to a signed-in user and send it to an outside server. Only one of the two routes is confirmed closed.