Vulnerability-Lookup

WID-SEC-W-2023-3063

Vulnerability from csaf_certbund - Published: 2023-12-05 23:00 - Updated: 2023-12-17 23:00

Summary

Atlassian Produkte: Mehrere Schwachstellen ermöglichen Codeausführung

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle. Confluence ist eine kommerzielle Wiki-Software. Jira ist eine Webanwendung zur Softwareentwicklung.

Angriff: Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software ausnutzen, um beliebigen Programmcode auszuführen.

Betroffene Betriebssysteme: - UNIX - Linux - Windows - Sonstiges

CVE-2023-22524

In Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software existieren mehrere Schwachstellen aufgrund von Fehlern in der SnakeYAML-Komponente, Fehlern bei der Prüfung von Eingaben, einem Fehler in der Companion-App sowie einem Fehler im Assets Discovery Agent zurückzuführen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuführen.

Affected products

Known affected 29 products

Product	Identifier	Version
Atlassian Jira Software Software Data Center Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:software_data_center`	—
Atlassian Jira Software Service Management Server Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:service_management_server`	—
Atlassian Jira Software Management Cloud Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:management_cloud`	—
Atlassian Confluence < 8.4.5 Atlassian / Confluence	`cpe:/a:atlassian:confluence:8.4.5`	—
Atlassian Jira Software Software Server Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:software_server`	—
Atlassian Confluence < 8.6.2 Atlassian / Confluence	`cpe:/a:atlassian:confluence:8.6.2`	—
Atlassian Confluence < 8.5.4 Atlassian / Confluence	`cpe:/a:atlassian:confluence:8.5.4`	—
Atlassian Bitbucket < 8.9.7 Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:8.9.7`	—
Atlassian Confluence < 8.7.1 Atlassian / Confluence	`cpe:/a:atlassian:confluence:8.7.1`	—
Atlassian Confluence Server Atlassian / Confluence	`cpe:/a:atlassian:confluence:server`	—
Atlassian Jira Software Core Data Center Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:core_data_center`	—
Atlassian Confluence Cloud Migration App Atlassian / Confluence	`cpe:/a:atlassian:confluence:cloud_migration_app`	—
Atlassian Jira Software Service Management Data Center Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:service_management_data_center`	—
Atlassian Jira Software Core Server Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:core_server`	—
Atlassian Bitbucket Data Center Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:data_center_and_server__8.14.0`	—
Atlassian Jira Software Service Management < 4.20.28 Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:service_management__4.20.28`	—
Atlassian Jira Software < 9.4.13 Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:9.4.13`	—
Atlassian Confluence < 7.19.17 Atlassian / Confluence	`cpe:/a:atlassian:confluence:7.19.17`	—
Atlassian Jira Software Service Management < 5.4.12 Atlassian / Jira Software	`cpe:/a:atlassian:jira_software:service_management__5.4.12`	—
Atlassian Bamboo < 9.3.5 Atlassian / Bamboo	`cpe:/a:atlassian:bamboo:9.3.5`	—
Atlassian Confluence Data Center Atlassian / Confluence	`cpe:/a:atlassian:confluence:data_center`	—
Atlassian Bitbucket < 7.21.18 Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:7.21.18`	—
Atlassian Bitbucket Server Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:server`	—
Atlassian Bamboo < 9.2.7 Atlassian / Bamboo	`cpe:/a:atlassian:bamboo:9.2.7`	—
Atlassian Confluence < 8.3.4 Atlassian / Confluence	`cpe:/a:atlassian:confluence:8.3.4`	—
Atlassian Bitbucket < 8.12.4 Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:8.12.4`	—
Atlassian Bitbucket < 8.11.6 Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:8.11.6`	—
Atlassian Bitbucket < 8.14.2 Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:8.14.2`	—
Atlassian Bitbucket < 8.13.3 Atlassian / Bitbucket	`cpe:/a:atlassian:bitbucket:8.13.3`	—

CVE-2023-22523

Affected products

Known affected 29 products, the same list as for CVE-2023-22524

CVE-2023-22522

Affected products

Known affected 29 products, the same list as for CVE-2023-22524

CVE-2022-1471

Affected products

Known affected 29 products, the same list as for CVE-2023-22524

References

7 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://confluence.atlassian.com/security/cve-202…	external
https://confluence.atlassian.com/security/cve-202…	external
https://confluence.atlassian.com/security/cve-202…	external
https://confluence.atlassian.com/security/cve-202…	external
https://confluence.atlassian.com/security/securit…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.\r\nConfluence ist eine kommerzielle Wiki-Software.\r\nJira ist eine Webanwendung zur Softwareentwicklung.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-3063 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3063.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-3063 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3063"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory CVE-2022-1471 vom 2023-12-05",
        "url": "https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory CVE\u20112023\u201122522 vom 2023-12-05",
        "url": "https://confluence.atlassian.com/security/cve-2023-22522-rce-vulnerability-in-confluence-data-center-and-confluence-server-1319570362.html"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory CVE\u20112023\u201122523 vom 2023-12-05",
        "url": "https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory CVE\u20112023\u201122524 vom 2023-12-05",
        "url": "https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Bulletin December 12 2023 vom 2023-12-12",
        "url": "https://confluence.atlassian.com/security/security-bulletin-december-12-2023-1319249520.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Atlassian Produkte: Mehrere Schwachstellen erm\u00f6glichen Codeausf\u00fchrung",
    "tracking": {
      "current_release_date": "2023-12-17T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:02:23.827+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2023-3063",
      "initial_release_date": "2023-12-05T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-12-05T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-12-12T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2023-12-17T23:00:00.000+00:00",
          "number": "3",
          "summary": "PoC aufgenommen"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Atlassian Bamboo \u003c 9.2.7",
                "product": {
                  "name": "Atlassian Bamboo \u003c 9.2.7",
                  "product_id": "1529586",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bamboo:9.2.7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bamboo \u003c 9.3.5",
                "product": {
                  "name": "Atlassian Bamboo \u003c 9.3.5",
                  "product_id": "T031324",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bamboo:9.3.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Bamboo"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket Data Center",
                "product": {
                  "name": "Atlassian Bitbucket Data Center",
                  "product_id": "T029977",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:data_center_and_server__8.14.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket \u003c 7.21.18",
                "product": {
                  "name": "Atlassian Bitbucket \u003c 7.21.18",
                  "product_id": "T031325",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:7.21.18"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket Server",
                "product": {
                  "name": "Atlassian Bitbucket Server",
                  "product_id": "T031468",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket \u003c 8.9.7",
                "product": {
                  "name": "Atlassian Bitbucket \u003c 8.9.7",
                  "product_id": "T031614",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:8.9.7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket \u003c 8.11.6",
                "product": {
                  "name": "Atlassian Bitbucket \u003c 8.11.6",
                  "product_id": "T031615",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:8.11.6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket \u003c 8.12.4",
                "product": {
                  "name": "Atlassian Bitbucket \u003c 8.12.4",
                  "product_id": "T031616",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:8.12.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket \u003c 8.13.3",
                "product": {
                  "name": "Atlassian Bitbucket \u003c 8.13.3",
                  "product_id": "T031617",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:8.13.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Bitbucket \u003c 8.14.2",
                "product": {
                  "name": "Atlassian Bitbucket \u003c 8.14.2",
                  "product_id": "T031618",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:bitbucket:8.14.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Bitbucket"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Atlassian Confluence \u003c 8.3.4",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.3.4",
                  "product_id": "T030846",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:8.3.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence Data Center",
                "product": {
                  "name": "Atlassian Confluence Data Center",
                  "product_id": "T031469",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:data_center"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence Server",
                "product": {
                  "name": "Atlassian Confluence Server",
                  "product_id": "T031470",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence Cloud Migration App",
                "product": {
                  "name": "Atlassian Confluence Cloud Migration App",
                  "product_id": "T031471",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:cloud_migration_app"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence \u003c 7.19.17",
                "product": {
                  "name": "Atlassian Confluence \u003c 7.19.17",
                  "product_id": "T031609",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:7.19.17"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence \u003c 8.4.5",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.4.5",
                  "product_id": "T031610",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:8.4.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence \u003c 8.5.4",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.5.4",
                  "product_id": "T031611",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:8.5.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence \u003c 8.6.2",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.6.2",
                  "product_id": "T031612",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:8.6.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Confluence \u003c 8.7.1",
                "product": {
                  "name": "Atlassian Confluence \u003c 8.7.1",
                  "product_id": "T031613",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:confluence:8.7.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Confluence"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Core Data Center",
                "product": {
                  "name": "Atlassian Jira Software Core Data Center",
                  "product_id": "T031472",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:core_data_center"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Core Server",
                "product": {
                  "name": "Atlassian Jira Software Core Server",
                  "product_id": "T031473",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:core_server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Service Management Data Center",
                "product": {
                  "name": "Atlassian Jira Software Service Management Data Center",
                  "product_id": "T031474",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:service_management_data_center"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Service Management Server",
                "product": {
                  "name": "Atlassian Jira Software Service Management Server",
                  "product_id": "T031475",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:service_management_server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Software Data Center",
                "product": {
                  "name": "Atlassian Jira Software Software Data Center",
                  "product_id": "T031476",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:software_data_center"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Software Server",
                "product": {
                  "name": "Atlassian Jira Software Software Server",
                  "product_id": "T031477",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:software_server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Management Cloud",
                "product": {
                  "name": "Atlassian Jira Software Management Cloud",
                  "product_id": "T031478",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:management_cloud"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software \u003c 9.4.13",
                "product": {
                  "name": "Atlassian Jira Software \u003c 9.4.13",
                  "product_id": "T031606",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:9.4.13"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Service Management \u003c 4.20.28",
                "product": {
                  "name": "Atlassian Jira Software Service Management \u003c 4.20.28",
                  "product_id": "T031607",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:service_management__4.20.28"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Atlassian Jira Software Service Management \u003c 5.4.12",
                "product": {
                  "name": "Atlassian Jira Software Service Management \u003c 5.4.12",
                  "product_id": "T031608",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:atlassian:jira_software:service_management__5.4.12"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Jira Software"
          }
        ],
        "category": "vendor",
        "name": "Atlassian"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22524",
      "notes": [
        {
          "category": "description",
          "text": "In Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software existieren mehrere Schwachstellen aufgrund von Fehlern in der SnakeYAML-Komponente, Fehlern bei der Pr\u00fcfung von Eingaben, einem Fehler in der Companion-App sowie einem Fehler im Assets Discovery Agent zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T031476",
          "T031475",
          "T031478",
          "T031610",
          "T031477",
          "T031612",
          "T031611",
          "T031614",
          "T031613",
          "T031470",
          "T031472",
          "T031471",
          "T031474",
          "T031473",
          "T029977",
          "T031607",
          "T031606",
          "T031609",
          "T031608",
          "T031324",
          "T031469",
          "T031325",
          "T031468",
          "1529586",
          "T030846",
          "T031616",
          "T031615",
          "T031618",
          "T031617"
        ]
      },
      "release_date": "2023-12-05T23:00:00.000+00:00",
      "title": "CVE-2023-22524"
    },
    {
      "cve": "CVE-2023-22523",
      "notes": [
        {
          "category": "description",
          "text": "In Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software existieren mehrere Schwachstellen aufgrund von Fehlern in der SnakeYAML-Komponente, Fehlern bei der Pr\u00fcfung von Eingaben, einem Fehler in der Companion-App sowie einem Fehler im Assets Discovery Agent zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T031476",
          "T031475",
          "T031478",
          "T031610",
          "T031477",
          "T031612",
          "T031611",
          "T031614",
          "T031613",
          "T031470",
          "T031472",
          "T031471",
          "T031474",
          "T031473",
          "T029977",
          "T031607",
          "T031606",
          "T031609",
          "T031608",
          "T031324",
          "T031469",
          "T031325",
          "T031468",
          "1529586",
          "T030846",
          "T031616",
          "T031615",
          "T031618",
          "T031617"
        ]
      },
      "release_date": "2023-12-05T23:00:00.000+00:00",
      "title": "CVE-2023-22523"
    },
    {
      "cve": "CVE-2023-22522",
      "notes": [
        {
          "category": "description",
          "text": "In Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software existieren mehrere Schwachstellen aufgrund von Fehlern in der SnakeYAML-Komponente, Fehlern bei der Pr\u00fcfung von Eingaben, einem Fehler in der Companion-App sowie einem Fehler im Assets Discovery Agent zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T031476",
          "T031475",
          "T031478",
          "T031610",
          "T031477",
          "T031612",
          "T031611",
          "T031614",
          "T031613",
          "T031470",
          "T031472",
          "T031471",
          "T031474",
          "T031473",
          "T029977",
          "T031607",
          "T031606",
          "T031609",
          "T031608",
          "T031324",
          "T031469",
          "T031325",
          "T031468",
          "1529586",
          "T030846",
          "T031616",
          "T031615",
          "T031618",
          "T031617"
        ]
      },
      "release_date": "2023-12-05T23:00:00.000+00:00",
      "title": "CVE-2023-22522"
    },
    {
      "cve": "CVE-2022-1471",
      "notes": [
        {
          "category": "description",
          "text": "In Atlassian Bitbucket, Atlassian Confluence und Atlassian Jira Software existieren mehrere Schwachstellen aufgrund von Fehlern in der SnakeYAML-Komponente, Fehlern bei der Pr\u00fcfung von Eingaben, einem Fehler in der Companion-App sowie einem Fehler im Assets Discovery Agent zur\u00fcckzuf\u00fchren. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T031476",
          "T031475",
          "T031478",
          "T031610",
          "T031477",
          "T031612",
          "T031611",
          "T031614",
          "T031613",
          "T031470",
          "T031472",
          "T031471",
          "T031474",
          "T031473",
          "T029977",
          "T031607",
          "T031606",
          "T031609",
          "T031608",
          "T031324",
          "T031469",
          "T031325",
          "T031468",
          "1529586",
          "T030846",
          "T031616",
          "T031615",
          "T031618",
          "T031617"
        ]
      },
      "release_date": "2023-12-05T23:00:00.000+00:00",
      "title": "CVE-2022-1471"
    }
  ]
}

CVE-2022-1471 (GCVE-0-2022-1471)

Vulnerability from cvelistv5 – Published: 2022-12-01 10:47 – Updated: 2025-06-18 08:32

Title

Remote Code execution in SnakeYAML

Summary

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.

Severity

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-07 18:13 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

Google Google root

References

11 references

URL	Tags
https://github.com/google/security-research/secur…
https://bitbucket.org/snakeyaml/snakeyaml/issues/…
https://github.com/mbechler/marshalsec
https://www.github.com/mbechler/marshalsec/blob/m…
https://groups.google.com/g/kubernetes-security-a…
https://security.netapp.com/advisory/ntap-2023081…
http://packetstormsecurity.com/files/175095/PyTor…
http://www.openwall.com/lists/oss-security/2023/11/19/1
https://security.netapp.com/advisory/ntap-2024062…
https://infosecwriteups.com/%EF%B8%8F-inside-the-…
https://confluence.atlassian.com/security/cve-202…

Impacted products

1 product

Vendor	Product	Version
SnakeYAML	SnakeYAML	Affected: 0 , ≤ 2.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:03:06.269Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/mbechler/marshalsec"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230818-0015/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/11/19/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-1471",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-07T18:13:22.155371Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T13:52:47.976Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "SnakeYAML",
          "vendor": "SnakeYAML",
          "versions": [
            {
              "lessThanOrEqual": "2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSnakeYaml\u0027s Constructor() class does not restrict types which can be instantiated during deserialization.\u0026nbsp;\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eDeserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml\u0027s SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.\u003c/span\u003e\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "SnakeYaml\u0027s Constructor() class does not restrict types which can be instantiated during deserialization.\u00a0Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml\u0027s SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-253",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-253 Remote Code Inclusion"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-18T08:32:58.546Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479"
        },
        {
          "url": "https://github.com/mbechler/marshalsec"
        },
        {
          "url": "https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"
        },
        {
          "url": "https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230818-0015/"
        },
        {
          "url": "http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/11/19/1"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
        },
        {
          "url": "https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c"
        },
        {
          "url": "https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Remote Code execution in SnakeYAML",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2022-1471",
    "datePublished": "2022-12-01T10:47:07.203Z",
    "dateReserved": "2022-04-26T08:32:53.188Z",
    "dateUpdated": "2025-06-18T08:32:58.546Z",
    "requesterUserId": "ed9b5bb2-2df1-4aa3-9791-5fb260d88e62",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-22522 (GCVE-0-2023-22522)

Vulnerability from cvelistv5 – Published: 2023-12-06 05:00 – Updated: 2026-02-25 16:52

Summary

This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution (RCE) on an affected instance. Publicly accessible Confluence Data Center and Server versions as listed below are at risk and require immediate attention. See the advisory for additional details Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

Severity

9 (Critical)


                        
                          CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-12-07 05:00 UTC

CWE

RCE (Remote Code Execution)
CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Assigner

atlassian mitre root

References

2 references

URL	Tags
https://confluence.atlassian.com/pages/viewpage.a…
https://jira.atlassian.com/browse/CONFSERVER-93502

Impacted products

2 products

Vendor	Product	Version
Atlassian	Confluence Data Center	Unaffected: < 4.0.0 Affected: >= 4.0.0 Affected: >= 7.20.0 Affected: >= 8.0.0 Affected: >= 8.6.0 Unaffected: >= 7.19.17 Unaffected: >= 8.4.5 Unaffected: >= 8.5.4 Unaffected: >= 8.6.2 Unaffected: >= 8.7.1
Atlassian	Confluence Server	Unaffected: < 4.0.0 Affected: >= 4.0.0 Affected: >= 7.20.0 Affected: >= 8.0.0 Affected: >= 8.6.0 Unaffected: >= 7.19.17 Unaffected: >= 8.4.5 Unaffected: >= 8.5.4 Unaffected: >= 8.6.2 Unaffected: >= 8.7.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T10:13:48.928Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://confluence.atlassian.com/pages/viewpage.action?pageId=1319570362"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.atlassian.com/browse/CONFSERVER-93502"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-22522",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-12-07T05:00:08.839200Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-74",
                "description": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-25T16:52:11.981Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Confluence Data Center",
          "vendor": "Atlassian",
          "versions": [
            {
              "status": "unaffected",
              "version": "\u003c 4.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.20.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 8.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 8.6.0"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 7.19.17"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.4.5"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.5.4"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.6.2"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.7.1"
            }
          ]
        },
        {
          "product": "Confluence Server",
          "vendor": "Atlassian",
          "versions": [
            {
              "status": "unaffected",
              "version": "\u003c 4.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.20.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 8.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 8.6.0"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 7.19.17"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.4.5"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.5.4"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.6.2"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 8.7.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page. Using this approach, an attacker is able to achieve Remote Code Execution (RCE) on an affected instance. Publicly accessible Confluence Data Center and Server versions as listed below are at risk and require immediate attention. See the advisory for additional details\n\nAtlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "RCE (Remote Code Execution)",
              "lang": "en",
              "type": "RCE (Remote Code Execution)"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-06T21:00:01.250Z",
        "orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
        "shortName": "atlassian"
      },
      "references": [
        {
          "url": "https://confluence.atlassian.com/pages/viewpage.action?pageId=1319570362"
        },
        {
          "url": "https://jira.atlassian.com/browse/CONFSERVER-93502"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
    "assignerShortName": "atlassian",
    "cveId": "CVE-2023-22522",
    "datePublished": "2023-12-06T05:00:02.870Z",
    "dateReserved": "2023-01-01T00:01:22.333Z",
    "dateUpdated": "2026-02-25T16:52:11.981Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-22523 (GCVE-0-2023-22523)

Vulnerability from cvelistv5 – Published: 2023-12-06 05:00 – Updated: 2026-02-25 16:52

Summary

This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.

Severity

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-12-14 05:00 UTC

CWE

RCE (Remote Code Execution)
CWE-noinfo Not enough information

Assigner

atlassian mitre root

References

2 references

URL	Tags
https://confluence.atlassian.com/security/cve-202…
https://jira.atlassian.com/browse/JSDSERVER-14925

Impacted products

2 products

Vendor	Product	Version
Atlassian	Assets Discovery Cloud	Unaffected: < 1.0.0 Affected: >= 1.0.0 Affected: >= 1.5.7.0 Affected: >= 1.5.7.1 Affected: >= 1.5.7.3 Affected: >= 1.5.7.4 Affected: >= 1.6.1.2 Affected: >= 1.6.2.0 Affected: >= 1.6.3.0 Affected: >= 1.6.4.0 Affected: >= 1.6.4.4 Affected: >= 1.7.0.0 Affected: >= 1.7.1.0 Affected: >= 1.7.2.0 Affected: >= 1.8.0.0 Affected: >= 1.8.1.1 Affected: >= 1.8.1.2 Affected: >= 1.8.1.3 Affected: >= 1.8.1.4 Affected: >= 1.8.1.5 Affected: >= 1.8.2.0 Affected: >= 2.0.0.0 Affected: >= 3.1.0 Affected: >= 3.1.1 Affected: >= 3.1.10 Affected: >= 3.1.11 Affected: >= 3.1.2 Affected: >= 3.1.3 Affected: >= 3.1.4 Affected: >= 3.1.5 Affected: >= 3.1.6 Affected: >= 3.1.7 Affected: >= 3.1.8 Affected: >= 3.1.9 Unaffected: >= 3.2.0
Atlassian	Assets Discovery Data Center	Unaffected: < 1.0.0 Affected: >= 1.0.0 Affected: >= 3.1.0 Affected: >= 3.1.1 Affected: >= 3.1.10 Affected: >= 3.1.11 Affected: >= 3.1.2 Affected: >= 3.1.3 Affected: >= 3.1.4 Affected: >= 3.1.5 Affected: >= 3.1.6 Affected: >= 3.1.7 Affected: >= 3.1.9 Affected: >= 6.0.0 Affected: >= 6.1.10 Affected: >= 6.1.11 Affected: >= 6.1.12 Affected: >= 6.1.13 Affected: >= 6.1.14 Affected: >= 6.1.9 Unaffected: >= 6.2.0

Credits

Bug Bounty

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T10:13:48.923Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.atlassian.com/browse/JSDSERVER-14925"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-22523",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-12-14T05:00:08.551203Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-25T16:52:39.413Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Assets Discovery Cloud",
          "vendor": "Atlassian",
          "versions": [
            {
              "status": "unaffected",
              "version": "\u003c 1.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.5.7.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.5.7.1"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.5.7.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.5.7.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.6.1.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.6.2.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.6.3.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.6.4.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.6.4.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.7.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.7.1.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.7.2.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.8.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.8.1.1"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.8.1.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.8.1.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.8.1.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.8.1.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.8.2.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.0.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.1"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.8"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.9"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 3.2.0"
            }
          ]
        },
        {
          "product": "Assets Discovery Data Center",
          "vendor": "Atlassian",
          "versions": [
            {
              "status": "unaffected",
              "version": "\u003c 1.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.1"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.1.9"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.1.10"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.1.11"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.1.12"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.1.13"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.1.14"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.1.9"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 6.2.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Bug Bounty"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "RCE (Remote Code Execution)",
              "lang": "en",
              "type": "RCE (Remote Code Execution)"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-06T15:30:00.483Z",
        "orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
        "shortName": "atlassian"
      },
      "references": [
        {
          "url": "https://confluence.atlassian.com/security/cve-2023-22523-rce-vulnerability-in-assets-discovery-1319248914.html"
        },
        {
          "url": "https://jira.atlassian.com/browse/JSDSERVER-14925"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
    "assignerShortName": "atlassian",
    "cveId": "CVE-2023-22523",
    "datePublished": "2023-12-06T05:00:02.793Z",
    "dateReserved": "2023-01-01T00:01:22.333Z",
    "dateUpdated": "2026-02-25T16:52:39.413Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-22524 (GCVE-0-2023-22524)

Vulnerability from cvelistv5 – Published: 2023-12-06 05:00 – Updated: 2026-02-25 16:53

Summary

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.

Severity

9.6 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-12-19 05:00 UTC

CWE

RCE (Remote Code Execution)
CWE-noinfo Not enough information

Assigner

atlassian mitre root

References

2 references

URL	Tags
https://confluence.atlassian.com/security/cve-202…
https://jira.atlassian.com/browse/CONFSERVER-93518

Impacted products

1 product

Vendor	Product	Version
Atlassian	Companion for Mac	Unaffected: < 1.0.0 Affected: >= 1.0.0 Affected: >= 1.1.0 Affected: >= 1.2.0 Affected: >= 1.2.2 Affected: >= 1.2.3 Affected: >= 1.2.4 Affected: >= 1.2.5 Affected: >= 1.2.6 Affected: >= 1.3.0 Affected: >= 1.3.1 Affected: >= 1.4.1 Affected: >= 1.4.2 Affected: >= 1.4.3 Affected: >= 1.4.4 Affected: >= 1.4.5 Affected: >= 1.4.6 Affected: >= 1.5.0 Affected: >= 1.6.0 Affected: >= 1.6.1 Unaffected: >= 2.0.0 Unaffected: >= 2.0.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T10:13:49.011Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.atlassian.com/browse/CONFSERVER-93518"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-22524",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-12-19T05:00:20.476961Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-25T16:53:03.327Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Companion for Mac",
          "vendor": "Atlassian",
          "versions": [
            {
              "status": "unaffected",
              "version": "\u003c 1.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.0.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.1.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.2.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.3.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.3.1"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.1"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.3"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.4.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.5.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.6.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 1.6.1"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 2.0.0"
            },
            {
              "status": "unaffected",
              "version": "\u003e= 2.0.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion\u2019s blocklist and MacOS Gatekeeper to allow execution of code."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "RCE (Remote Code Execution)",
              "lang": "en",
              "type": "RCE (Remote Code Execution)"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-06T15:30:00.480Z",
        "orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
        "shortName": "atlassian"
      },
      "references": [
        {
          "url": "https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html"
        },
        {
          "url": "https://jira.atlassian.com/browse/CONFSERVER-93518"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
    "assignerShortName": "atlassian",
    "cveId": "CVE-2023-22524",
    "datePublished": "2023-12-06T05:00:02.649Z",
    "dateReserved": "2023-01-01T00:01:22.333Z",
    "dateUpdated": "2026-02-25T16:53:03.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

WID-SEC-W-2023-3063

CVE-2022-1471 (GCVE-0-2022-1471)

CVE-2023-22522 (GCVE-0-2023-22522)

CVE-2023-22523 (GCVE-0-2023-22523)

CVE-2023-22524 (GCVE-0-2023-22524)

Tags

Sightings

Nomenclature

Related by attack behaviour