CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown...

Basic Information

CVE State: PUBLISHED
Reserved Date: January 01, 2023
Published Date: October 04, 2023
Last Updated: September 13, 2024
Vendor: Atlassian
Product: Confluence Data Center, Confluence Server
Description: Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

CVSS Scores

CVSS v3.0

10.0 - CRITICAL

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2025-04-25 00:00:00 UTC) Source
Proof of Concept Available: Yes (added 2023-11-08 05:18:30 UTC) Source
Used in Malware: Yes (added 2023-10-05 00:00:00 UTC) Source

References

http://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html https://confluence.atlassian.com/display/KB/FAQ+for+CVE-2023-22515 https://confluence.atlassian.com/pages/viewpage.action?pageId=1295682276 https://jira.atlassian.com/browse/CONFSERVER-92475

Known Exploited Vulnerability Information

Source	Added Date
CISA	2023-10-05 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22515.rb	2025-04-29 11:01:20 UTC
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22515.yaml	2025-04-26 00:00:00 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

atlassian_confluence_rce_cve_2023_22515

Type: metasploit • Created: Unknown

Metasploit module for CVE-2023-22515

spareack/CVE-2023-22515-NSE

Type: github • Created: 2024-07-18 19:55:59 UTC • Stars: 4

Vulnerability checking tool via Nmap Scripting Engine

rxerium/CVE-2023-22515

Type: github • Created: 2024-02-24 16:04:35 UTC • Stars: 2

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

LucasPDiniz/CVE-2023-22515

Type: github • Created: 2023-11-08 05:18:30 UTC • Stars: 2

Server Broken Access Control in Confluence - CVE-2023-22515

joaoviictorti/CVE-2023-22515

Type: github • Created: 2023-10-22 23:37:56 UTC • Stars: 3

CVE-2023-22515 (Confluence Broken Access Control Exploit)

youcannotseemeagain/CVE-2023-22515_RCE

Type: github • Created: 2023-10-20 08:23:47 UTC • Stars: 19

Confluence后台rce

Le1a/CVE-2023-22515

Type: github • Created: 2023-10-13 05:18:54 UTC • Stars: 6

Confluence Data Center & Server 权限提升漏洞 Exploit

sincere9/CVE-2023-22515

Type: github • Created: 2023-10-12 02:41:23 UTC • Stars: 25

Confluence未授权添加管理员用户漏洞利用脚本

kh4sh3i/CVE-2023-22515

Type: github • Created: 2023-10-11 11:21:47 UTC • Stars: 4

CVE-2023-22515 - Broken Access Control Vulnerability in Confluence Data Center and Server

ad-calcium/CVE-2023-22515

Type: github • Created: 2023-10-11 08:42:17 UTC • Stars: 107

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

Chocapikk/CVE-2023-22515

Type: github • Created: 2023-10-10 21:40:09 UTC • Stars: 133

CVE-2023-22515: Confluence Broken Access Control Exploit

j3seer/CVE-2023-22515-POC

Type: github • Created: 2023-10-10 18:45:10 UTC • Stars: 8

Poc for CVE-2023-22515

ErikWynter/CVE-2023-22515-Scan

Type: github • Created: 2023-10-06 20:29:44 UTC • Stars: 75

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence