Critical RCE Vulnerability in Atlassian Confluence Data Center and Confluence Server
Template injection vulnerability CVE-2023-22522 could lead to remote code execution
Summary
Template injection vulnerability CVE-2023-22522 could lead to remote code execution
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
Atlassian has released an advisory to address a security vulnerability that affects Confluence Server and Confluence Data Center. CVE-2023-22522 is a template injection vulnerability with a CVSSv3 score of 9.0. A remote, authenticated attacker, including one with anonymous access, could exploit this vulnerability by injecting unsafe user input into a user Confluence page potentially leading to remote code execution (RCE).
Potential Exploitation of Confluence
Atlassian Confluence instances are often externally-facing by design and present an attractive target for exploitation by nation state and cyber criminal threat groups. Confluence vulnerabilities have been heavily targeted with exploits developed rapidly after vulnerability disclosure, leading to exploitation in the wild.
Remediation advice
Affected organisations must review Atlassian's CVE-2023-22522 - RCE Vulnerability In Confluence Data Center and Confluence Server advisory and apply the relevant updates as soon as practicable.
Definitive source of threat updates
Last edited: 13 December 2023 10:51 am