PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Atlassian Confluence Server (CVE-2023-22518) - Improper Authorization

projectdiscovery.io | vulnerability | CVE-2023-22518 | #bug-bounty
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2023-22518 is a critical vulnerability in Atlassian Confluence Data Center and Server. The vulnerability could potentially allow unauthenticated attackers with network access to the Confluence Instance to restore the database of the Confluence instance and eventually execute arbitrary system commands. Technical Details After performing a patch diff between the patched and unpatched versions, we identified the addition of two new annotations, namely, @WebSudoRequired and @SystemAdminOnly,
CVE
CVE-2023-22518
Published
Collected

Related coverage

vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
vulnerability · projectdiscovery.io
Celebrating 2024: Securing your infrastructure with ProjectDiscovery
As 2024 comes to a close, we want to celebrate the milestones we’ve achieved together with our ProjectDiscovery community. Thanks to your trust and collaboration, here’s what we’ve accomplished this year on ProjectDiscovery. Platform growth 2k+ new vulnerability templates Identifying nearly 1k high-profile vulnerabilities affecting 600+ unique products—including Atlassian Confluence, GitLab, MLflow, Grafana, GitHub Enterprise, Ivanti, Fortinet, and Palo Alto Networks 50k+ cloud-based scans
vulnerability · projectdiscovery.io
July 2024 Newsletter
Welcome to the July edition of the ProjectDiscovery Community Newsletter. As summer moves along, so too have the team been hard at work improving and iterating on our tools and templates, alongside our valuable community contributions. Our updates from the last few weeks can be caught up on below, and of course keep looking out for the latest news and developments in vulnerability and cybersecurity technology as we continue to share them with you. We’ll also keep highlighting contributions from
vulnerability · projectdiscovery.io
Interactsh: Open-Source Solution for OOB Testing
What is Interactsh? Interactsh is a server-client implementation that allows users to identify blind Out-of-Band (OOB) vulnerabilities that may not be detected by conventional testing methods. Out-of-Band testing works by generating dynamic URLs, which when requested by the target, trigger a callback. This callback can be used to identify a vulnerability. Why did we build Interactsh? We wanted an Open-Source solution for Blind OOB testing. Interactsh simplifies the server setup process. It
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
$1 million hacker challenge for Vercel Sandbox
Vercel is running a two-week, public HackerOne program with up to $1,000,000 in bounties for researchers who can escape a Vercel Sandbox.
Back