Descripción
Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- Aviso de confluence.atlassian.com confluence.atlassian.com/security/cve-2023-22518-improper-authorizati…
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2023-22518
Otras vulnerabilidades de Atlassian en el catálogo
- CVE-2026-21589 Vulnerabilidad de archivos o directorios accesibles a terceros externos en varios productos de Atlassian Alta 15-10-2026
- CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability Alta 12-11-2024
- CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability Alta 24-01-2024
- CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Alta 05-10-2023
- CVE-2022-36804 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Alta 30-09-2022