Skip to content
OpenAdvisories
Critical · 10.0 Known exploited · Ransomware Scanner template Public exploit CVE-2023-22518 EUVD-2023-26658GHSA-8prx-84h6-4fr5

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability…

Published Oct 31, 2023 · Updated Oct 21, 2025 · Assigned by atlassian

Vendor: Atlassian Product: Confluence Data Center Product: Confluence Server Category: Web / CMS

Description

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but not limited to - full loss of confidentiality, integrity and availability. 

Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

Affected products

VendorProductAffectedFixed
Atlassian Confluence Data Center >= 1.0.0 < 1.0.0
Atlassian Confluence Server >= 1.0.0 < 1.0.0

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

GitHub 8 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Advisories 3

References