PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2023-22518

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2023-22518.

Coverage Span
2023-11-02
Reports
1 related reports

Associated Reports & Timeline

1.
Atlassian Confluence Server (CVE-2023-22518) - Improper Authorization
projectdiscovery.io | vulnerability | | Original ↗ | .md | #bug-bounty
CVE-2023-22518 is a critical vulnerability in Atlassian Confluence Data Center and Server. The vulnerability could potentially allow unauthenticated attackers with network access to the Confluence Instance to restore the database of the Confluence instance and eventually execute arbitrary system commands. Technical Details After performing a patch diff between the patched and unpatched versions, we identified the addition of two new annotations, namely, @WebSudoRequired and @SystemAdminOnly,