Critical 1 exploited CVE WID-SEC-2023-2555 1 CVE

Atlassian Confluence Data Center and Server: Schwachstelle ermöglicht Privilegieneskalation

Published Oct 4, 2023 · Updated Oct 4, 2023 · de-DE

Vendor: Atlassian Product: Confluence Product: Confluence < 8.3.3 Product: Confluence < 8.4.3 Product: Confluence < 8.5.2 Product: Confluence > 8.0.0 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Confluence ausnutzen, um seine Privilegien zu erhöhen.

Product

Confluence ist eine kommerzielle Wiki-Software.

Vulnerabilities 1

Critical 10.0

CVE-2023-22515 Exploited · Ransomware Public exploit Scanner template EPSS 99%

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploite…

Atlassian Confluence Data Center Confluence Server Web / CMS

Oct 4, 2023
KEV Oct 5, 2023

Revision history

2023-10-04 #1
Initiale Fassung

References

Atlassian Confluence Security Notification vom 2023-10-04
https://github.com/advisories/GHSA-g458-xvmc-qg2r
Atlassian Confluence Security Notification vom 2023-10-04
https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html