CVE Watch—

CVE-2023-22527

Atlassian Confluence Data Center and Server Template Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

24 de jan. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Atlassian / Confluence Data Center and Server

Vulnerabilidade

Atlassian Confluence Data Center and Server Template Injection Vulnerability

Adicionado ao KEV

24 de jan. de 2024

Corrigir até

14 de fev. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html; https://nvd.nist.gov/vuln/detail/CVE-2023-22527

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2023-22518—

100.0%

KEV—80Atlassian Confluence Data Center and Server Improper Authorization Vulnerability—CVE-2023-22515—

99.9%

KEV—80Atlassian Confluence Data Center and Server Broken Access Control Vulnerability—