[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhtUzq0oxrXZQtdY07IOKWbn3rFVXTUiBU0wJmtXRppg":3,"g5a-risk:CVE-2023-22518":171},{"success":4,"data":5,"meta":168},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":27,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":58,"references":59,"referencesCount":88,"weaknesses":89,"weaknessesCount":98,"isActivelyExploited":4,"cisaInfo":99,"otxData":27,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":166,"notableEvents":167},"CVE-2023-22518","What is CVE-2023-22518?","All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but not limited to - full loss of confidentiality, integrity and availability. \n\nAtlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.","All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthe...","2023-10-31T15:15:08.573","2025-10-24T13:38:59.063",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":40,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":39},"security@atlassian.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":37,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":38,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",10,6,[],0.99999,[41,41,41,41,41,41,41],"Critical",[45,50,53,56],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"atlassian","confluence_data_center","*","cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"8.6.0","cpe:2.3:a:atlassian:confluence_data_center:8.6.0:*:*:*:*:*:*:*",{"vendor":46,"product":54,"version":48,"criteria":55,"vulnerable":4},"confluence_server","cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*",{"vendor":46,"product":54,"version":51,"criteria":57,"vulnerable":4},"cpe:2.3:a:atlassian:confluence_server:8.6.0:*:*:*:*:*:*:*",4,[60,67,74,77,79,81,83],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F176264\u002FAtlassian-Confluence-Improper-Authorization-Code-Execution.html","Packetstormsecurity",[64,65,66],"Exploit","Third Party Advisory","VDB Entry",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fconfluence.atlassian.com\u002Fpages\u002Fviewpage.action?pageId=1311473907","Atlassian",[71,72,73],"Issue Tracking","Mitigation","Vendor Advisory",{"url":75,"source":69,"tags":76},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FCONFSERVER-93142",[71,72,73],{"url":61,"source":62,"tags":78},[64,65,66],{"url":68,"source":69,"tags":80},[71,72,73],{"url":75,"source":69,"tags":82},[71,72,73],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2023-22518","CISA",[87],"US Government Resource",7,[90],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",1,{"shortDescription":100,"requiredAction":100,"vulnerabilityName":100,"dateAdded":27},"",[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2023-22518? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-22518, a critical severity cyber security vulnerability from 2023. High exploit probability (100.0%). All versions of Conf...","CVE-2023-22518, CVE-2023-22518 vulnerability, CVE-2023-22518 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, atlassian security, confluence_data_center vulnerability, confluence_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2023-22518",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-22518","Cybersecurity","CVE-2023-22518, CVE-2023-22518 vulnerability, CVE-2023-22518 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128,152],{"Operator":27,"Negate":27,"Nodes":129},[130],{"Operator":131,"Negate":132,"CPEMatch":133},"OR",false,[134,138,142,146,150],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":135,"VersionStartExcluding":27,"VersionStartIncluding":136,"VersionEndExcluding":137,"VersionEndIncluding":27},"6EFE3358-3C6B-4C54-98B4-E573AC0C6A43","1.0","7.19.16",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":27},"65733215-581D-4F2A-B023-899386A4A59C","7.20.0","8.3.4",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":144,"VersionEndExcluding":145,"VersionEndIncluding":27},"56B04148-6AE0-4FD2-BD3D-B07A9E62F229","8.4.0","8.4.4",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":148,"VersionEndExcluding":149,"VersionEndIncluding":27},"3660C634-0DB0-40B2-A905-1E00360A53FB","8.5.0","8.5.3",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"05E3896A-C145-44DB-8370-9263A139765D",{"Operator":27,"Negate":27,"Nodes":153},[154],{"Operator":131,"Negate":132,"CPEMatch":155},[156,158,160,162,164],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":136,"VersionEndExcluding":137,"VersionEndIncluding":27},"949F14BD-CBDD-4633-8A72-3CA2B6310CBB",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":27},"06FD0F88-133B-4421-8644-1948FDA2AA65",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":144,"VersionEndExcluding":145,"VersionEndIncluding":27},"F459BB01-A089-4128-93AD-A71FE3B49E22",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":148,"VersionEndExcluding":149,"VersionEndIncluding":27},"5DA741B1-9AA7-42F6-8F50-32FE732D25D5",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E995F8F6-E9A6-4076-8AE8-38A28A5F58D3",[],[],{"lastModified":11,"cacheTime":169,"version":170},1792377184301,"2.0",{"score":172,"band":43,"action":173,"scoredAt":174},90,"Emergency patch","2026-10-16T06:59:37.684722+00:00"]