Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-22515
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Atlassian Confluence Server 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Atlassian Confluence Server是澳大利亚Atlassian公司的一套具有企业知识管理功能,并支持用于构建企业WiKi的协同软件的服务器版本。 Atlassian Confluence Server存在安全漏洞,该漏洞源于外部攻击者可能利用可公开访问的Confluence Data Center和Confluence Serve,用未知的漏洞来创建Confluence 管理员帐户并访问 Confluence 实例。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
AtlassianConfluence Data Center < 8.0.0 -
AtlassianConfluence Server < 8.0.0 -
II. Public POCs for CVE-2023-22515
#POC DescriptionSource LinkShenlong Link
1Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluencehttps://github.com/ErikWynter/CVE-2023-22515-ScanPOC Details
2Poc for CVE-2023-22515https://github.com/j3seer/CVE-2023-22515-POCPOC Details
3CVE-2023-22515: Confluence Broken Access Control Exploithttps://github.com/Chocapikk/CVE-2023-22515POC Details
4Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具https://github.com/ad-calcium/CVE-2023-22515POC Details
5CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Serverhttps://github.com/kh4sh3i/CVE-2023-22515POC Details
6Confluence未授权添加管理员用户漏洞利用脚本https://github.com/sincere9/CVE-2023-22515POC Details
7Confluence Data Center & Server 权限提升漏洞 Exploithttps://github.com/Le1a/CVE-2023-22515POC Details
8Confluence Broken Access Controlhttps://github.com/Vulnmachines/confluence-cve-2023-22515POC Details
9iveresk-CVE-2023-22515https://github.com/iveresk/CVE-2023-22515POC Details
10Confluence后台rcehttps://github.com/youcannotseemeagain/CVE-2023-22515_RCEPOC Details
11cve-2023-22515的python利用脚本https://github.com/DsaHen/cve-2023-22515-expPOC Details
12CVE-2023-22515 (Confluence Broken Access Control Exploit)https://github.com/joaoviictorti/CVE-2023-22515POC Details
13CVE-2023-22515https://github.com/C1ph3rX13/CVE-2023-22515POC Details
14CVE-2023-22515https://github.com/AIex-3/confluence-hackPOC Details
15Server Broken Access Control in Confluence - CVE-2023-22515https://github.com/LucasPDiniz/CVE-2023-22515POC Details
16配合 CVE-2023-22515 后台上传jar包实现RCEhttps://github.com/aaaademo/Confluence-EvilJarPOC Details
17Nonehttps://github.com/edsonjt81/CVE-2023-22515-Scan.POC Details
18Confluence broken access control to code executionhttps://github.com/INTfinityConsulting/cve-2023-22515POC Details
19A simple exploit for CVE-2023-22515https://github.com/CalegariMindSec/Exploit-CVE-2023-22515POC Details
20Atlassian Confluence Data Center and Server Broken Access Control Vulnerabilityhttps://github.com/rxerium/CVE-2023-22515POC Details
21NSE script for checking the presence of CVE-2023-22515https://github.com/fyx1t/NSE--CVE-2023-22515POC Details
22This script will inform the user if the Confluence instance is vulnerable, but it will not proceed with the exploitation steps.https://github.com/s1d6point7bugcrowd/CVE-2023-22515-checkPOC Details
23NSE script to check if app is vulnerable to cve-2023-22515https://github.com/xorbbo/cve-2023-22515POC Details
24Vulnerability checking tool via Nmap Scripting Enginehttps://github.com/spareack/CVE-2023-22515-NSEPOC Details
25CVE 2023-22515https://github.com/Onedy1703/CVE-2023-22515POC Details
26CVE 2023-22515https://github.com/Onedy1703/CVE-2023-22515-ConfluencePOC Details
27Nonehttps://github.com/vivigotnotime/CVE-2023-22515-Exploit-ScriptPOC Details
28Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22515.yamlPOC Details
29Nonehttps://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Atlassian%20Confluence%20server-info.action%20%E5%B1%9E%E6%80%A7%E8%A6%86%E7%9B%96%E5%AF%BC%E8%87%B4%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%20CVE-2023-22515.mdPOC Details
30https://github.com/vulhub/vulhub/blob/master/confluence/CVE-2023-22515/README.mdPOC Details
31CVE-2023-22515 (Confluence Broken Access Control Exploit)https://github.com/killvxk/CVE-2023-22515-joaoviictortiPOC Details
32Confluence未授权添加管理员用户漏洞利用脚本https://github.com/K4ptor/CVE-2023-22515POC Details
33I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian Confluence. The alert showed a suspicious GET request from an external IP targeting the Confluence server, suggesting an attempt to gain unauthorised admin access.https://github.com/Arkha-Corvus/LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197POC Details
34Hands-on security lab demonstrating CVE-2023-22515 — Atlassian Confluence Authentication Bypass using a simulated vulnerable environment.https://github.com/CyberSentinel321/cve-2023-22515-labPOC Details
35Confluence CVE-2023-22515 - Create admin accounthttps://github.com/radzek15/CVE-2023-22515POC Details
36Nonehttps://github.com/tranphuc2005/CVE-2023-22515POC Details
37Nonehttps://github.com/dkq-k/CVE-2023-22515POC Details
38Nonehttps://github.com/dkq-k/cve-2023-22515-1POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2023-22515
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2023-22515

No comments yet


Leave a comment