The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to access control deficiencies, allows attackers to increase their privileges.

🗓️ 06 Oct 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Confluence Server and Data Center have an access control vulnerability enabling remote privilege escalation.

Reporter	Title	Published	Views	Family All 90
Gitee	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	6 Sep 202501:49	–	gitee
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	10 Oct 202321:40	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	2 Jan 202417:40	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	18 Jul 202419:55	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	11 Oct 202311:21	–	githubexploit
GithubExploit	Exploit for CVE-2022-21449	20 Apr 202219:13	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	8 Nov 202305:18	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	12 Oct 202302:41	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	24 Oct 202506:38	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	23 Jan 202413:38	–	githubexploit

Vulners

Node

atlassian confluence_serverRange8.0.0–8.3.3

OR

atlassian confluence_serverRange8.0.0–8.4.3

OR

atlassian confluence_serverRange8.0.0–8.5.2

OR

atlassian jira_data_centerRange8.0.0–8.3.3

OR

atlassian jira_data_centerRange8.0.0–8.4.3

OR

atlassian jira_data_centerRange8.0.0–8.5.2

Source	Link
vuldb	www.vuldb.com/ru/
confluence	www.confluence.atlassian.com/kb/faq-for-cve-2023-22515-1295682188.html
confluence	www.confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html
jira	www.jira.atlassian.com/browse/CONFSERVER-92475
rapid7	www.rapid7.com/blog/post/2023/10/04/etr-cve-2023-22515-zero-day-privilege-escalation-in-confluence-server-and-data-center/
github	www.github.com/Chocapikk/CVE-2023-22515
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
packetstormsecurity	www.packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html
web	www.web.nvd.nist.gov/view/vuln/detail

06 May 2026 00:00Current

8High risk

Vulners AI Score8

CVSS 210

CVSS 310

EPSS0.99699

atlassian confluence server confluence data center access control vulnerability remote privilege escalation