CVE-2023-22515 — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

CISA KEVExploited: confirmedAtlassian

Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.

Vulnerability details

Affected productsConfluence Data Center and Server
KEV remediation due2023-10-13