Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Improper Authorization in Confluence Server and Data Center (CVE-2023-22518) - Vulnerability Database

Improper Authorization in Confluence Server and Data Center (CVE-2023-22518)

Description

Due to an improper authorization control vulnerability in Confluence, an unauthenticated attacker can create an administrator account and get full access to the system.

Remediation

Upgrade to the latest version of Confluence

References

Improper Authorization in Confluence Data Center and Server - CVE-2023-22518
Atlassian Confluence Server (CVE-2023-22518) - Improper Authorization

Related Vulnerabilities

VMware directory traversal and privilege escalation vulnerabilities High
Common tags: Known Vulnerabilities Privilege Escalation
VirtueMart access control bypass High
Common tags: Known Vulnerabilities Privilege Escalation
Broken access control in Confluence Server and Data Center (CVE-2023-22515) Critical
Common tags: Known Vulnerabilities Privilege Escalation
SharePoint CVE-2020-0980 Vulnerability (CVE-2020-0980) High
Common tags: Known Vulnerabilities
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0933) Medium
Common tags: Known Vulnerabilities

Severity

Critical

Classification

CVE-2023-22518
CWE-284
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Tags

Known Vulnerabilities
Privilege Escalation