Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2023-22518

🗓️ 31 Oct 2023 14:30:00Reported by atlassianType 
cve
 cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 622 Views🌐 WEB

CVE-2023-22518: Improper Authorization allows unauthenticated attacker to reset Confluence and create admin account

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
9 Nov 202306:56
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
20 Nov 202318:58
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
23 Jan 202413:38
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
5 Nov 202306:45
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
2 Nov 202322:52
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
28 Nov 202303:33
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
31 Oct 202305:35
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
31 Oct 202305:35
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
5 May 202502:12
–githubexploit
githubexploit
GithubExploit		Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
5 Nov 202306:45
–githubexploit
Rows per page
NVD
Node
OR
atlassianconfluence_data_centerRange1.0–7.19.16
atlassianconfluence_data_centerRange7.20.0–8.3.4
atlassianconfluence_data_centerRange8.4.0–8.4.4
atlassianconfluence_data_centerRange8.5.0–8.5.3
atlassianconfluence_data_centerMatch8.6.0
Node
OR
atlassianconfluence_serverRange1.0–7.19.16
atlassianconfluence_serverRange7.20.0–8.3.4
atlassianconfluence_serverRange8.4.0–8.4.4
atlassianconfluence_serverRange8.5.0–8.5.3
atlassianconfluence_serverMatch8.6.0
[
  {
    "vendor": "Atlassian",
    "product": "Confluence Data Center",
    "versions": [
      {
        "version": "< 1.0.0",
        "status": "unaffected"
      },
      {
        "version": ">= 1.0.0",
        "status": "affected"
      },
      {
        "version": ">= 7.19.16",
        "status": "unaffected"
      },
      {
        "version": ">= 8.3.4",
        "status": "unaffected"
      },
      {
        "version": ">= 8.4.4",
        "status": "unaffected"
      },
      {
        "version": ">= 8.5.3",
        "status": "unaffected"
      },
      {
        "version": ">= 8.6.1",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "Atlassian",
    "product": "Confluence Server",
    "versions": [
      {
        "version": "< 1.0.0",
        "status": "unaffected"
      },
      {
        "version": ">= 1.0.0",
        "status": "affected"
      },
      {
        "version": ">= 7.19.16",
        "status": "unaffected"
      },
      {
        "version": ">= 8.3.4",
        "status": "unaffected"
      },
      {
        "version": ">= 8.4.4",
        "status": "unaffected"
      },
      {
        "version": ">= 8.5.3",
        "status": "unaffected"
      },
      {
        "version": ">= 8.6.1",
        "status": "unaffected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
buildIndexrequest body/json/setup-restore.actionUnauthenticated Confluence setup-restore endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
editrequest body/json/setup-restore.actionUnauthenticated Confluence setup-restore endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
filerequest body/json/setup-restore.actionUnauthenticated Confluence setup-restore endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
buildIndexrequest body/json/setup-restore-local.actionUnauthenticated Confluence setup-restore-local endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
editrequest body/json/setup-restore-local.actionUnauthenticated Confluence setup-restore-local endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
filerequest body/json/setup-restore-local.actionUnauthenticated Confluence setup-restore-local endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
buildIndexrequest body/json/setup-restore-progress.actionUnauthenticated Confluence setup-restore-progress endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
editrequest body/json/setup-restore-progress.actionUnauthenticated Confluence setup-restore-progress endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863
filerequest body/json/setup-restore-progress.actionUnauthenticated Confluence setup-restore-progress endpoint that can trigger account reset/privilege escalation vulnerability (CVE-2023-22518).CWE-863

geeyoff

HelpwithCrowdsecbouncerinCaddy,please?

CodingPenguin44

HourlyIT/Tech/PhysicsNews

UnctusM

Atlassian Confluence Server (CVE-2023-22518) - Improper Authorization https://t.co/frHyalA8Dt

SANS_ISC" / X

Increase in Exploit Attempts for Atlassian Confluence Server (CVE-2023-22518) https://t.co/hcqtnJekZu via /SANS_ISC

pentesttoolscom

Go *beyond* authentication bypass & get RCE using CVE-2023-22515 and CVE-2023-22518! David, Security Researcher, shows you how to demonstrate the risk involved if an attacker uses these CVEs successfully: https://t.co/FpwT2zOkSV Let's do this!

fluidattacks

Threat actors exploit unpatched #Atlassian servers to deploy Cerber #ransomware (C3RB3R). CVE-2023-22518 affects Atlassian Confluence, allowing attackers to reset and create admin accounts. Read more https://t.co/yghfBJ3sXp #WeHackYourSoftware #linux #cyberflaws #cybersecurity

isectech_

Alert: Hackers are exploiting a critical vulnerability (CVE-2023-22518) in Atlassian servers to gain admin access and deploy a Linux variant of Cerber ransomware.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 05:35Current
9.4High risk
Vulners AI Score9.4
CVSS 3.19.8
CVSS 310
EPSS0.99999
SSVC
CWE-863In Wild
cve-2023-22518confluenceimproper authorizationunauthenticated attackeradministrator account
622