VDB
CVE-2023-22524
CVE-2023-22524
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle. Confluence ist eine kommerzielle Wiki-Software. Jira ist eine Webanwendung zur Softwareentwicklung.
EPSS 24.73% · 97.7th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
24.73%
97.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Atlassian Confluence Data Center LTS <10.2.11 | |
| Atlassian | Atlassian Confluence Data Center | |
| Atlassian | Atlassian Confluence < 8.6.2 | |
| Atlassian | Atlassian Jira Software Core Data Center | |
| Atlassian | Atlassian Crucible <4.9.10 | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Atlassian | Atlassian Jira Software < 9.4.13 | |
| Atlassian | Atlassian Confluence < 8.5.4 | |
| Atlassian | Atlassian Confluence < 8.3.4 | |
| Atlassian | Atlassian Confluence Data Center LTS <9.2.20 | |
| Atlassian | Atlassian Jira Data Center LTS <10.3.20 | |
| Atlassian | Atlassian Bitbucket < 8.13.3 | |
| Atlassian | Atlassian Jira Software Core Server | |
| Atlassian | Atlassian Bitbucket < 8.12.4 | |
| Atlassian | Atlassian Bamboo Data Center LTS <10.2.19 | |
| Atlassian | Atlassian Confluence < 8.4.5 | |
| Atlassian | Atlassian Confluence < 8.7.1 | |
| Atlassian | Atlassian Fisheye <4.9.10 | |
| Atlassian | Atlassian Bamboo < 9.2.7 | |
| Red Hat | Red Hat Enterprise Linux |
…and 23 more
Timeline
- Dec 5, 2023 CVE Published
- Dec 6, 2023 EPSS Score
- Jan 5, 2024 EPSS Score
- Jan 30, 2024 PoC Published
- Mar 4, 2024 EPSS Score
- Apr 2, 2024 EPSS Score
- May 31, 2024 EPSS Score
- Jun 30, 2024 EPSS Score
- Aug 28, 2024 EPSS Score
- Sep 27, 2024 EPSS Score
- Nov 25, 2024 EPSS Score
- Dec 25, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3063.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3063 advisory
- https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html advisory
- https://confluence.atlassian.com/security/cve-2023-22522-rce-vulnerability-in-confluence-data-center-and-confluence-server-1319570362.html advisory
- https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html advisory
- https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html advisory
- https://confluence.atlassian.com/security/security-bulletin-december-12-2023-1319249520.html advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1608.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1608 advisory
- https://confluence.atlassian.com/security/security-bulletin-may-19-2026-1786839142.html advisory
- https://access.redhat.com/errata/RHSA-2026:19098 advisory
- https://access.redhat.com/errata/RHSA-2026:35992 advisory
- https://access.redhat.com/errata/RHSA-2026:35997 advisory
- https://access.redhat.com/errata/RHSA-2026:36012 advisory
- https://access.redhat.com/errata/RHSA-2026:35991 advisory
- https://access.redhat.com/errata/RHSA-2026:35990 advisory
- https://access.redhat.com/errata/RHSA-2026:35996 advisory
- https://access.redhat.com/errata/RHSA-2026:38514 advisory
- https://access.redhat.com/errata/RHSA-2026:38500 advisory
- https://access.redhat.com/errata/RHSA-2026:41928 advisory