PT-2023-5694 · Atlassian · Confluence

Published 2023-10-04 · Updated 2026-04-19 · CVE-2023-22515

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Atlassian Confluence Data Center and Server versions 8.0.0 through 8.5.1

Exploit

Fix

RCE

Improper Access Control

Weakness Enumeration

CWE-20

CWE-284

Related Identifiers

BDU:2023-06364

CVE-2023-22515

Affected Products

Confluence

References · 342

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/atlassian_confluence_auth_bypass.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22515.rb · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2023-22515 · Exploit
• 🔥 https://github.com/ad-calcium/CVE-2023-22515 · Exploit
• 🔥 https://github.com/ErikWynter/CVE-2023-22515-Scan · Exploit
• 🔥 https://github.com/AIex-3/confluence-hack · Exploit
• 🔥 https://github.com/sincere9/CVE-2023-22515 · Exploit
• 🔥 https://github.com/youcannotseemeagain/CVE-2023-22515_RCE · Exploit
• 🔥 https://github.com/aaaademo/Confluence-EvilJar · Exploit
• 🔥 https://github.com/j3seer/CVE-2023-22515-POC · Exploit
• 🔥 https://github.com/Le1a/CVE-2023-22515 · Exploit
• 🔥 https://github.com/joaoviictorti/CVE-2023-22515 · Exploit
• 🔥 https://github.com/spareack/CVE-2023-22515-NSE · Exploit
• 🔥 https://github.com/kh4sh3i/CVE-2023-22515 · Exploit
• 🔥 http://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html · Exploit