CVE-2023-22527

🗓️ 16 Jan 2024 05:00:00Reported by atlassianType

cve🔗 web.nvd.nist.gov📰️ 20 Media mentions👁 598 Views🌐 WEB

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE

Reporter	Title	Published	Views	Family All 74
zdt	Atlassian Confluence SSTI Injection Exploit	29 Jan 202400:00	–	zdt
zdt	Atlassian Confluence < 8.5.3 - Remote Code Execution Exploit	18 Mar 202400:00	–	zdt
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	23 Jan 202417:07	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	26 Feb 202402:34	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	23 Jan 202417:07	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	23 Jan 202408:53	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	22 Jan 202411:38	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	23 Jan 202409:28	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	25 Jan 202405:32	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	10 Mar 202608:01	–	githubexploit

NVD

Node

atlassian confluence_data_centerRange8.0.0–8.5.4

atlassian confluence_data_centerMatch8.7.0

Node

atlassian confluence_serverRange8.0.0–8.5.4

[
  {
    "vendor": "Atlassian",
    "product": "Confluence Data Center",
    "versions": [
      {
        "version": "< 8.0.0",
        "status": "unaffected"
      },
      {
        "version": ">= 8.0.0",
        "status": "affected"
      },
      {
        "version": ">= 8.1.0",
        "status": "affected"
      },
      {
        "version": ">= 8.2.0",
        "status": "affected"
      },
      {
        "version": ">= 8.3.0",
        "status": "affected"
      },
      {
        "version": ">= 8.4.0",
        "status": "affected"
      },
      {
        "version": ">= 8.5.0",
        "status": "affected"
      },
      {
        "version": ">= 8.5.1",
        "status": "affected"
      },
      {
        "version": ">= 8.5.2",
        "status": "affected"
      },
      {
        "version": ">= 8.5.3",
        "status": "affected"
      },
      {
        "version": ">= 8.5.4",
        "status": "unaffected"
      },
      {
        "version": ">= 8.6.0",
        "status": "unaffected"
      },
      {
        "version": ">= 8.7.1",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "Atlassian",
    "product": "Confluence Server",
    "versions": [
      {
        "version": "< 8.0.0",
        "status": "unaffected"
      },
      {
        "version": ">= 8.0.0",
        "status": "affected"
      },
      {
        "version": ">= 8.1.0",
        "status": "affected"
      },
      {
        "version": ">= 8.2.0",
        "status": "affected"
      },
      {
        "version": ">= 8.3.0",
        "status": "affected"
      },
      {
        "version": ">= 8.4.0",
        "status": "affected"
      },
      {
        "version": ">= 8.5.0",
        "status": "affected"
      },
      {
        "version": ">= 8.5.1",
        "status": "affected"
      },
      {
        "version": ">= 8.5.2",
        "status": "affected"
      },
      {
        "version": ">= 8.5.3",
        "status": "affected"
      },
      {
        "version": ">= 8.5.4",
        "status": "unaffected"
      },
      {
        "version": ">= 8.6.0",
        "status": "unaffected"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/CONFSERVER-93833
packetstormsecurity	www.packetstormsecurity.com/files/176789/Atlassian-Confluence-SSTI-Injection.html
confluence	www.confluence.atlassian.com/pages/viewpage.action
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
vicarius	www.vicarius.io/vsociety/posts/pwning-confluence-via-ognl-injection-for-fun-and-learning-cve-2023-22527

Parameter	Position	Path	Description	CWE
label	request body	/template/aui/text-inline.vm	Template injection leading to remote code execution via OGNL in Confluence Confluence server (CVE-2023-22527).	CWE-74
x	request body	/template/aui/text-inline.vm	Template injection leading to remote code execution via OGNL in Confluence Confluence server (CVE-2023-22527).	CWE-74

17 Jun 2026 05:35Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

CVSS 310

EPSS0.99984

SSVC