---
id: 9302
title: "Atlassian Confluence - Remote Code Execution (CVE-2023-22527)"
cve: CVE-2023-22527
source_domain: projectdiscovery.io
source_url: "https://projectdiscovery.io/blog/atlassian-confluence-ssti-remote-code-execution"
published_at: "2024-01-22T09:01:21Z"
tags: ["bug-bounty", "rce"]
phying_url: "https://phying.com/item/9302"
lang: en
---

# Atlassian Confluence - Remote Code Execution (CVE-2023-22527)

## Summary

CVE-2023-22527 is a critical vulnerability within Atlassian's Confluence Server and Data Center. This vulnerability has the potential to permit unauthenticated attackers to inject OGNL expressions into the Confluence instance, thereby enabling the execution of arbitrary code and system commands. Technical Details Initial Analysis The CVE description provided by Atlassian made it clear that this vulnerability was automatically rendered unexploitable in version 8.5.4 due to certain incorpora

## Intelligence Metadata

- **Sources:** projectdiscovery.io
- **CVE:** CVE-2023-22527
- **Published:** 2024-01-22T09:01:21Z
- **Original:** https://projectdiscovery.io/blog/atlassian-confluence-ssti-remote-code-execution
- **Phying News:** https://phying.com/item/9302