CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Vereiste actie (tekst van CISA, Engels)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.

Beschrijving (NVD, Engels)

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.

BRONNEN

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Andere lekken bij Atlassian

• CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
• CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability
• CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability
• CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
• CVE-2022-36804: Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.