High WID-SEC-2023-1780 2 CVEs

Atlassian Confluence: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jul 18, 2023 · Updated Jul 18, 2023 · de-DE

Vendor: Atlassian Product: Confluence Product: Confluence < 8.4.0 Product: Confluence < 8.2.0 Product: Confluence < 8.3.2 Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Atlassian Confluence ausnutzen, um beliebigen Programmcode auszuführen.

Product

Confluence ist eine kommerzielle Wiki-Software.

Vulnerabilities 2

High 8.5

CVE-2023-22508

This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of…

Atlassian Confluence Data Center Confluence Server Web / CMS

Jul 18, 2023
High 8.0

CVE-2023-22505

This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of…

Atlassian Confluence Server Confluence Data Center Web / CMS

Jul 18, 2023

Revision history

2023-07-18 #1
Initiale Fassung

References

Github Security Advisory vom 2023-07-18
https://github.com/advisories/GHSA-jq45-hqc5-f722
Github Security Advisory vom 2023-07-18
https://github.com/advisories/GHSA-78hc-mph9-mhfm