PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2023-22527

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2023-22527.

Coverage Span
2024-01-22
Reports
1 related reports

Associated Reports & Timeline

1.
Atlassian Confluence - Remote Code Execution (CVE-2023-22527)
projectdiscovery.io | vulnerability | | Original ↗ | .md | #bug-bounty | #rce
CVE-2023-22527 is a critical vulnerability within Atlassian's Confluence Server and Data Center. This vulnerability has the potential to permit unauthenticated attackers to inject OGNL expressions into the Confluence instance, thereby enabling the execution of arbitrary code and system commands. Technical Details Initial Analysis The CVE description provided by Atlassian made it clear that this vulnerability was automatically rendered unexploitable in version 8.5.4 due to certain incorpora