Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Atlassian Confluence Vulnerability - CVE-2023-22505 - Vulnerability Database
Atlassian Confluence

Atlassian Confluence Vulnerability - CVE-2023-22505

High
Reference: CVE-2023-22505
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-22505
Title: Atlassian Confluence Vulnerability
Overview:

This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of Confluence Data Center amp Server. This RCE (Remote Code Execution) vulnerability with a CVSS Score of 8 allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality high impact to integrity high impact to availability and no user interaction. Atlassian recommends that you upgrade your instance to latest version. If you39re unable to upgrade to latest upgrade to one of these fixed versions: 8.3.2 8.4.0. See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html).https://confluence.atlassian.com/doc/confluence-release-notes-327.html). You can download the latest version of Confluence Data Center amp Server from the download center (https://www.atlassian.com/software/confluence/download-archives).https://www.atlassian.com/software/confluence/download-archives). This vulnerability was discovered by a private user and reported via our Bug Bounty program.