Firetruck

CVE-2023-22527

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
confluence_data_centeratlassian / confluence_data_center>= 8.0.0, < 8.5.4affected
Confluence Data CenterAtlassian / Confluence Data Center< 8.0.0unaffected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.0.0affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.1.0affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.2.0affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.3.0affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.4.0affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.5.0affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.5.1affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.5.2affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.5.3affected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.5.4unaffected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.6.0unaffected
Confluence Data CenterAtlassian / Confluence Data Center>= 8.7.1unaffected
confluence_serveratlassian / confluence_server>= 8.0.0, < 8.5.4affected
Confluence ServerAtlassian / Confluence Server< 8.0.0unaffected
Confluence ServerAtlassian / Confluence Server>= 8.0.0affected
Confluence ServerAtlassian / Confluence Server>= 8.1.0affected
Confluence ServerAtlassian / Confluence Server>= 8.2.0affected
Confluence ServerAtlassian / Confluence Server>= 8.3.0affected
Confluence ServerAtlassian / Confluence Server>= 8.4.0affected
Confluence ServerAtlassian / Confluence Server>= 8.5.0affected
Confluence ServerAtlassian / Confluence Server>= 8.5.1affected
Confluence ServerAtlassian / Confluence Server>= 8.5.2affected
Confluence ServerAtlassian / Confluence Server>= 8.5.3affected
Confluence ServerAtlassian / Confluence Server>= 8.5.4unaffected
Confluence ServerAtlassian / Confluence Server>= 8.6.0unaffected