Critical 1 exploited CVE WID-SEC-2023-2775 1 CVE

Atlassian Confluence: Schwachstelle ermöglicht Erlangen von Administratorrechten

Published Oct 30, 2023 · Updated Nov 8, 2023 · Revision 3 · de-DE

Vendor: Atlassian Product: Confluence Product: Confluence < 7.19.16 Product: Confluence < 8.3.4 Product: Confluence < 8.4.4 Product: Confluence < 8.5.3 Product: Confluence < 8.6.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Confluence ausnutzen, um Administratorrechte zu erlangen.

Product

Confluence ist eine kommerzielle Wiki-Software.

Vulnerabilities 1

Critical 10.0

CVE-2023-22518 Exploited · Ransomware Public exploit Scanner template EPSS 100%

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authori…

Atlassian Confluence Data Center Confluence Server Web / CMS

Oct 31, 2023
KEV Nov 7, 2023

Revision history

2023-11-08 #3
Text Und Bewertung angepasst
2023-11-06 #2
Aktive Ausnutzung gemeldet
2023-10-30 #1
Initiale Fassung

References

Atlassian Security Advisory Update vom 2023-06-11
https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html
Atlassian Security Advisory vom 2023-10-30
https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html