Skip to main content
IMMUNITYSEC

CVE-2023-22518

10.0
CRITICAL
CVSS 3.0
EPSS 100.0% · 100th pctCISA KEV · Exploited in the wild
2023-10-31•Updated 2025-10-21•KEV 2023-11-07
CISA Known Exploited Vulnerabilities

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV
2023-11-07
Remediation due
2023-11-28
Ransomware
Known use

Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA notes
https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html; https://nvd.nist.gov/vuln/detail/CVE-2023-22518

Description

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but not limited to - full loss of confidentiality, integrity and availability.  Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

Severity

CVSS 3.0 · CNA10 CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
SSVC · CISA-ADP
Exploitationactive
Automatableyes
Technical impactpartial

Affected Products

VendorProductAffected versions
AtlassianConfluence Data Center
< 1.0.0 (unaffected)
>= 1.0.0
>= 7.19.16 (unaffected)
>= 8.3.4 (unaffected)
>= 8.4.4 (unaffected)
>= 8.5.3 (unaffected)
>= 8.6.1 (unaffected)
AtlassianConfluence Server
< 1.0.0 (unaffected)
>= 1.0.0
>= 7.19.16 (unaffected)
>= 8.3.4 (unaffected)
>= 8.4.4 (unaffected)
>= 8.5.3 (unaffected)
>= 8.6.1 (unaffected)

References

3 Links

Record Details

Published
2023-10-31
Last updated
2025-10-21
Assigner (CNA)
atlassian
Credited to
-

More from Atlassian

CVE-2022-261349.8

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

CVE-2021-260849.8

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

CVE-2021-260865.3

Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVE-2023-2252710

Atlassian Confluence Data Center and Server Template Injection Vulnerability

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.