CVE-2023-22515: Critical Privilege Escalation Vulnerability in Atlassian's Confluence | Grey Noise Blog

Summary: A critical zero-day vulnerability in Atlassian's Confluence Data Center and Server, tracked as CVE-2023-22515 and scored CVSS 10 out of 10, allows external attackers to create administrator accounts and access Confluence instances. Atlassian rates it critical and has released patches, stating cloud-hosted Confluence is not impacted, while on-premise instances on the public internet are exploitable anonymously.
Why it matters: Exploitation was observed before the advisory and patch existed, so any internet-facing Confluence instance may already have attacker-created administrator accounts sitting in it - which is why auditing user accounts for signs of compromise matters as much as patching.

Read the original at GreyNoise Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-22515
Related: CVE-2023-22515: Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Known Exploited Vulnerabilities · Oct 05, 2023
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026