Vulnerability identifier: #VU81631

Vulnerability risk: Critical

CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2023-22515

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 7

• April 5, 2024
  • CVE-2023-22515 (Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具) [Github]
• March 22, 2024
  • CVE-2023-22515-Scan (Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence) [Github]
• January 15, 2024
  • confluence-hack (CVE-2023-22515) [Github]
• October 20, 2023
  • Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control [Metasploit]
• October 19, 2023
  • Atlassian Confluence Unauthenticated Remote Code Execution [Metasploit]
• October 11, 2023
  • CVE-2023-22515 (CVE-2023-22515: Confluence Broken Access Control Exploit) [Github]
  • CVE-2023-22515 (CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server) [Github]

Impact: Code execution

Vulnerable software:
Confluence Data Center
Server applications / Other server solutions

Vendor: Atlassian