CVE-2023-22515

🗓️ 04 Oct 2023 14:00:00Reported by atlassianType

cve🔗 web.nvd.nist.gov📰️ 13 Media mentions👁 988 Views🌐 WEB

Atlassian Confluence Data Center & Server vulnerability allows unauthorized admin account creatio

Reporter	Title	Published	Views	Family All 126
GithubExploit	CVE-Confluence	13 Aug 202611:38	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	10 Oct 202321:40	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	2 Jan 202417:40	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	18 Jul 202419:55	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	11 Oct 202311:21	–	githubexploit
GithubExploit	Exploit for CVE-2022-21449	20 Apr 202219:13	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	8 Nov 202305:18	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	12 Oct 202302:41	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Atlassian Confluence_Data_Center	24 Oct 202506:38	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	23 Jan 202413:38	–	githubexploit

NVD

Vulners

Node

atlassian confluence_data_centerRange8.0.0–8.3.3

atlassian confluence_data_centerRange8.4.0–8.4.3

atlassian confluence_data_centerRange8.5.0–8.5.2

atlassian confluence_serverRange8.0.0–8.3.3

atlassian confluence_serverRange8.4.0–8.4.3

atlassian confluence_serverRange8.5.0–8.5.2

[
  {
    "vendor": "Atlassian",
    "product": "Confluence Data Center",
    "versions": [
      {
        "version": "< 8.0.0",
        "status": "unaffected"
      },
      {
        "version": ">= 8.0.0",
        "status": "affected"
      },
      {
        "version": ">= 8.0.1",
        "status": "affected"
      },
      {
        "version": ">= 8.0.2",
        "status": "affected"
      },
      {
        "version": ">= 8.0.3",
        "status": "affected"
      },
      {
        "version": ">= 8.1.3",
        "status": "affected"
      },
      {
        "version": ">= 8.1.4",
        "status": "affected"
      },
      {
        "version": ">= 8.2.0",
        "status": "affected"
      },
      {
        "version": ">= 8.2.1",
        "status": "affected"
      },
      {
        "version": ">= 8.2.2",
        "status": "affected"
      },
      {
        "version": ">= 8.2.3",
        "status": "affected"
      },
      {
        "version": ">= 8.3.0",
        "status": "affected"
      },
      {
        "version": ">= 8.3.1",
        "status": "affected"
      },
      {
        "version": ">= 8.3.2",
        "status": "affected"
      },
      {
        "version": ">= 8.4.0",
        "status": "affected"
      },
      {
        "version": ">= 8.4.1",
        "status": "affected"
      },
      {
        "version": ">= 8.4.2",
        "status": "affected"
      },
      {
        "version": ">= 8.5.0",
        "status": "affected"
      },
      {
        "version": ">= 8.5.1",
        "status": "affected"
      },
      {
        "version": ">= 8.3.3",
        "status": "unaffected"
      },
      {
        "version": ">= 8.4.3",
        "status": "unaffected"
      },
      {
        "version": ">= 8.5.2",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "Atlassian",
    "product": "Confluence Server",
    "versions": [
      {
        "version": "< 8.0.0",
        "status": "unaffected"
      },
      {
        "version": ">= 8.0.0",
        "status": "affected"
      },
      {
        "version": ">= 8.0.1",
        "status": "affected"
      },
      {
        "version": ">= 8.0.2",
        "status": "affected"
      },
      {
        "version": ">= 8.0.3",
        "status": "affected"
      },
      {
        "version": ">= 8.1.3",
        "status": "affected"
      },
      {
        "version": ">= 8.1.4",
        "status": "affected"
      },
      {
        "version": ">= 8.2.0",
        "status": "affected"
      },
      {
        "version": ">= 8.2.1",
        "status": "affected"
      },
      {
        "version": ">= 8.2.2",
        "status": "affected"
      },
      {
        "version": ">= 8.2.3",
        "status": "affected"
      },
      {
        "version": ">= 8.3.0",
        "status": "affected"
      },
      {
        "version": ">= 8.3.1",
        "status": "affected"
      },
      {
        "version": ">= 8.3.2",
        "status": "affected"
      },
      {
        "version": ">= 8.4.0",
        "status": "affected"
      },
      {
        "version": ">= 8.4.1",
        "status": "affected"
      },
      {
        "version": ">= 8.4.2",
        "status": "affected"
      },
      {
        "version": ">= 8.5.0",
        "status": "affected"
      },
      {
        "version": ">= 8.5.1",
        "status": "affected"
      },
      {
        "version": ">= 8.3.3",
        "status": "unaffected"
      },
      {
        "version": ">= 8.4.3",
        "status": "unaffected"
      },
      {
        "version": ">= 8.5.2",
        "status": "unaffected"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/CONFSERVER-92475
packetstormsecurity	www.packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html
confluence	www.confluence.atlassian.com/pages/viewpage.action
confluence	www.confluence.atlassian.com/display/KB/FAQ+for+CVE-2023-22515
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
bootstrapStatusProvider.applicationConfig.setupComplete=false	query param	/server-info.action?bootstrapStatusProvider.applicationConfig.setupComplete=false	Authentication bypass via setup completion flag triggering setup mode	CWE-20
username	request body	/setup/setupadministrator.action	Create new administrator account during setup bypass	CWE-20
fullName	request body	/setup/setupadministrator.action	Create new administrator account during setup bypass	CWE-20
email	request body	/setup/setupadministrator.action	Create new administrator account during setup bypass	CWE-20
password	request body	/setup/setupadministrator.action	Create new administrator account during setup bypass	CWE-20
confirm	request body	/setup/setupadministrator.action	Create new administrator account during setup bypass	CWE-20
setup-next-button	request body	/setup/setupadministrator.action	Create new administrator account during setup bypass	CWE-20
username	query param	/rest/api/user?username=${USERNAME}	Authenticate as created admin via REST API using username	CWE-20