CVE-2023-22515
Quick assessment
Affected
Atlassian Confluence Data Center
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Atlassian Confluence Server是澳大利亚Atlassian公司的一套具有企业知识管理功能，并支持用于构建企业WiKi的协同软件的服务器版本。 Atlassian Confluence Server存在安全漏洞，该漏洞源于外部攻击者可能利用可公开访问的Confluence Data Center和Confluence Serve，用未知的漏洞来创建Confluence 管理员帐户并访问 Confluence 实例。
Public Exploits 3
Metasploit · 2
atlassian_confluence_rce_cve_2023_22515.rb [exploit]
atlassian_confluence_auth_bypass.rb [auxiliary]
Nuclei · 1
CVE-2023-22515.yaml [template]
In-the-Wild Activity Observed
cisa_kev · confirmed
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-22515
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances.
Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Atlassian Confluence Server 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Atlassian Confluence Server是澳大利亚Atlassian公司的一套具有企业知识管理功能，并支持用于构建企业WiKi的协同软件的服务器版本。 Atlassian Confluence Server存在安全漏洞，该漏洞源于外部攻击者可能利用可公开访问的Confluence Data Center和Confluence Serve，用未知的漏洞来创建Confluence 管理员帐户并访问 Confluence 实例。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Atlassian | Confluence Data Center | < 8.0.0 | - |
|
| Atlassian | Confluence Server | < 8.0.0 | - |
|
II. Public POCs for CVE-2023-22515
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence | https://github.com/ErikWynter/CVE-2023-22515-Scan | POC Details |
| 2 | Poc for CVE-2023-22515 | https://github.com/j3seer/CVE-2023-22515-POC | POC Details |
| 3 | CVE-2023-22515: Confluence Broken Access Control Exploit | https://github.com/Chocapikk/CVE-2023-22515 | POC Details |
| 4 | Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具 | https://github.com/ad-calcium/CVE-2023-22515 | POC Details |
| 5 | CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server | https://github.com/kh4sh3i/CVE-2023-22515 | POC Details |
| 6 | Confluence未授权添加管理员用户漏洞利用脚本 | https://github.com/sincere9/CVE-2023-22515 | POC Details |
| 7 | Confluence Data Center & Server 权限提升漏洞 Exploit | https://github.com/Le1a/CVE-2023-22515 | POC Details |
| 8 | Confluence Broken Access Control | https://github.com/Vulnmachines/confluence-cve-2023-22515 | POC Details |
| 9 | iveresk-CVE-2023-22515 | https://github.com/iveresk/CVE-2023-22515 | POC Details |
| 10 | Confluence后台rce | https://github.com/youcannotseemeagain/CVE-2023-22515_RCE | POC Details |
| 11 | cve-2023-22515的python利用脚本 | https://github.com/DsaHen/cve-2023-22515-exp | POC Details |
| 12 | CVE-2023-22515 (Confluence Broken Access Control Exploit) | https://github.com/joaoviictorti/CVE-2023-22515 | POC Details |
| 13 | CVE-2023-22515 | https://github.com/C1ph3rX13/CVE-2023-22515 | POC Details |
| 14 | CVE-2023-22515 | https://github.com/AIex-3/confluence-hack | POC Details |
| 15 | Server Broken Access Control in Confluence - CVE-2023-22515 | https://github.com/LucasPDiniz/CVE-2023-22515 | POC Details |
| 16 | 配合 CVE-2023-22515 后台上传jar包实现RCE | https://github.com/aaaademo/Confluence-EvilJar | POC Details |
| 17 | None | https://github.com/edsonjt81/CVE-2023-22515-Scan. | POC Details |
| 18 | Confluence broken access control to code execution | https://github.com/INTfinityConsulting/cve-2023-22515 | POC Details |
| 19 | A simple exploit for CVE-2023-22515 | https://github.com/CalegariMindSec/Exploit-CVE-2023-22515 | POC Details |
| 20 | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | https://github.com/rxerium/CVE-2023-22515 | POC Details |
| 21 | NSE script for checking the presence of CVE-2023-22515 | https://github.com/fyx1t/NSE--CVE-2023-22515 | POC Details |
| 22 | This script will inform the user if the Confluence instance is vulnerable, but it will not proceed with the exploitation steps. | https://github.com/s1d6point7bugcrowd/CVE-2023-22515-check | POC Details |
| 23 | NSE script to check if app is vulnerable to cve-2023-22515 | https://github.com/xorbbo/cve-2023-22515 | POC Details |
| 24 | Vulnerability checking tool via Nmap Scripting Engine | https://github.com/spareack/CVE-2023-22515-NSE | POC Details |
| 25 | CVE 2023-22515 | https://github.com/Onedy1703/CVE-2023-22515 | POC Details |
| 26 | CVE 2023-22515 | https://github.com/Onedy1703/CVE-2023-22515-Confluence | POC Details |
| 27 | None | https://github.com/vivigotnotime/CVE-2023-22515-Exploit-Script | POC Details |
| 28 | Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22515.yaml | POC Details |
| 29 | None | https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Atlassian%20Confluence%20server-info.action%20%E5%B1%9E%E6%80%A7%E8%A6%86%E7%9B%96%E5%AF%BC%E8%87%B4%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%20CVE-2023-22515.md | POC Details |
| 30 | https://github.com/vulhub/vulhub/blob/master/confluence/CVE-2023-22515/README.md | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-22515
请登录查看更多情报信息。
Other References for CVE-2023-22515 (3)
IV. Related Vulnerabilities
V. Comments for CVE-2023-22515
No comments yet