VDB
BDU%3A2023-06364
BDU%3A2023-06364
PUBLISHED
CVSS 10 CRITICAL
Уязвимость веб-сервера Atlassian Confluence Server и дата центра Confluence Data Center, связанная с недостатками контроля доступа, позволяющая нарушителю повысить свои привилегии
Risk Scores
CVSS 3.0
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Confluence Data Center | *, < 8.0.0, >= 8.0.0 |
| Atlassian | Confluence Server | >= 8.3.3, >= 8.0.1, >= 8.0.2 |
| Atlassian | Confluence Server, Jira Data Center |
Timeline
- Oct 5, 2023 PoC Published
- Oct 5, 2023 PoC Published
- Oct 6, 2023 CVE Published
- Oct 19, 2023 PoC Published
- Oct 19, 2023 PoC Published
- Sep 16, 2024 PoC Published
- Sep 24, 2024 CVE Updated
- Oct 15, 2024 PoC Published
- Oct 24, 2024 PoC Published
- Oct 25, 2024 PoC Published
- Oct 26, 2024 PoC Published
- Oct 27, 2024 PoC Published
References
- https://github.com/Chocapikk/CVE-2023-22515 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://vuldb.com/ru/?id.241275 url
- https://confluence.atlassian.com/pages/viewpage.action?pageId=1295682276 url
- http://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html url
- https://confluence.atlassian.com/display/KB/FAQ+for+CVE-2023-22515 url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-22515 url
- https://confluence.atlassian.com/kb/faq-for-cve-2023-22515-1295682188.html url
- https://www.rapid7.com/blog/post/2023/10/04/etr-cve-2023-22515-zero-day-privilege-escalation-in-confluence-server-and-data-center/ url
- https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html url
- https://jira.atlassian.com/browse/CONFSERVER-92475 advisory