Description
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server.
This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.
Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version. If you are unable to do so, upgrade your instance to one of the specified supported fixed versions. See the release notes https://confluence.atlassian.com/doc/confluence-release-notes-327.html
You can download the latest version of Confluence Data Center and Server from the download center https://www.atlassian.com/software/confluence/download-archives.
This vulnerability was found internally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Confluence Data Center | 8.9.0, 8.8.0 to 8.8.1, 8.7.1 to 8.7.2, 8.6.0 to 8.6.2, 8.5.0 to 8.5.8, 8.4.0 to 8.4.5, 8.3.0 to 8.3.4, 8.2.0 to 8.2.3, 8.1.0 to 8.1.4, 8.0.0 to 8.0.4, 7.20.0 to 7.20.3, 7.19.0 to 7.19.21 | 8.9.1 to 8.9.2 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Atlassian Confluence Administrator Code Macro Remote Code Execution
exploit/multi/http/atlassian_confluence_rce_cve_2024_21683
GitHub 5 repositories
-
W01fh4cker/CVE-2024-21683-RCE ★ 128 · May 23, 2024
CVE-2024-21683 Confluence Post Auth RCE
-
absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server ★ 11 · May 24, 2024
This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the ser…
-
r00t7oo2jm/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server ★ 2 · May 23, 2024
This vulnerability allows an unauthenticated attacker to remotely execute arbitrary code on a vulnerable Confluence server. The vulnerability exists due to an improper validation of user-supplied inp…
-
phucrio/CVE-2024-21683-RCE ★ 1 · May 27, 2024
-
r3db34rdh4x/cve-2024-21683-rce ★ 0 · Nov 29, 2025
CVE-2024-21683 Confluence Post Auth RCE
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Atlassian Confluence Data Center and Server - Remote Code Execution http/cves/2024/CVE-2024-21683.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 2
- WID-SEC-2024-1210 Atlassian Confluence: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 3, 2024
- NCSC-2024-0231 Kwetsbaarheden verholpen in Atlassian producten NCSC-NL (Netherlands) · May 22, 2024