High WID-SEC-2023-3063 4 CVEs

Atlassian Produkte: Mehrere Schwachstellen ermöglichen Codeausführung

Published Dec 5, 2023 · Updated Dec 17, 2023 · Revision 3 · de-DE

Vendor: Atlassian Product: Bamboo Product: Bamboo < 9.2.7 Product: Bamboo < 9.3.5 Product: Bitbucket Product: Bitbucket < 7.21.18 Product: Bitbucket < 8.11.6 Product: Bitbucket < 8.12.4 Product: Bitbucket < 8.13.3 Product: Bitbucket < 8.14.2 Product: Bitbucket < 8.9.7 Product: Bitbucket Data Center Product: Bitbucket Server Product: Confluence Product: Confluence < 7.19.17 Product: Confluence < 8.3.4 Product: Confluence < 8.4.5 Product: Confluence < 8.5.4 Product: Confluence < 8.6.2 Product: Confluence < 8.7.1 Product: Confluence Cloud Migration App Product: Confluence Data Center Product: Confluence Server Product: Jira Software Product: Jira Software < 9.4.13 Product: Jira Software Core Data Center Product: Jira Software Core Server Product: Jira Software Management Cloud Product: Jira Software Service Management < 4.20.28 Product: Jira Software Service Management < 5.4.12 +6 more

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software ausnutzen, um beliebigen Programmcode auszuführen.

Product

Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.
Confluence ist eine kommerzielle Wiki-Software.
Jira ist eine Webanwendung zur Softwareentwicklung.

Vulnerabilities 4

Critical 9.8

CVE-2023-22523 EPSS 11%

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with…

Atlassian Assets Discovery Data Center Assets Discovery Cloud

Dec 6, 2023
Critical 9.6

CVE-2023-22524 Public exploit EPSS 25%

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An at…

Atlassian Companion for Mac

Dec 6, 2023
Critical 9.0

CVE-2023-22522 EPSS 13%

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject …

Atlassian Confluence Data Center Confluence Server Web / CMS

Dec 6, 2023
High 8.3

CVE-2022-1471 Public exploit EPSS 100%

Remote Code execution in SnakeYAML

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrust…

SnakeYaml SnakeYaml management-api-for-apache-cassandra-5.0 cassandra-reaper Debian Ubuntu Wolfi Maven

Dec 1, 2022

Revision history

2023-12-17 #3
PoC aufgenommen
2023-12-12 #2
Neue Updates aufgenommen
2023-12-05 #1
Initiale Fassung

References

Atlassian Security Advisory CVE-2022-1471 vom 2023-12-05
https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
Atlassian Security Advisory CVE‑2023‑22522 vom 2023-12-05
https://confluence.atlassian.com/security/cve-2023-22522-rce-vulnerability-in-confluence-data-center-and-confluence-server-1319570362.html
Atlassian Security Advisory CVE‑2023‑22523 vom 2023-12-05
https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html
Atlassian Security Advisory CVE‑2023‑22524 vom 2023-12-05
https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html
Atlassian Security Bulletin December 12 2023 vom 2023-12-12
https://confluence.atlassian.com/security/security-bulletin-december-12-2023-1319249520.html