CVE-2023-22518

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html; https://nvd.nist.gov/vuln/detail/CVE-2023-22518

Remediation deadline: November 28, 2023

Ransomware use: Known

Description

Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.

Timeline

Published:November 7th, 2023 12:00 AM

Last modified:November 7th, 2023 12:00 AM

Added to KEV:November 7th, 2023

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Atlassian

Products

Confluence Data Center and Server

Weaknesses (CWE)

CWE-863

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute