mirror of
https://github.com/gobysec/GobyVuls.git
synced 2025-05-28 09:10:42 +00:00
1.6 KiB
1.6 KiB
Atlassian Confluence permission bypass vulnerability (CVE-2023-22515)
| Vulnerability | Atlassian Confluence permission bypass vulnerability (CVE-2023-22515) |
|---|---|
| Chinese name | Atlassian Confluence 权限绕过漏洞（CVE-2023-22515） |
| CVSS core | 10.0 |
| FOFA Query (click to view the results directly) | app="ATLASSIAN-Confluence" |
| Number of assets affected | 97667 |
| Description | Atlassian Confluence is a software developed by Atlassian based on the online enterprise wiki (collaboration software).A vulnerability exists in the Atlassian Confluence data center and server. The /server-info.action endpoint is used to pass the bootstrapStatusProvider.applicationConfig.setupComplete parameter, leaving the server in an incomplete state to access restricted endpoints and create unauthorized Confluence administrator accounts. Log in to the Confluence instance backend. |
| Impact | A vulnerability exists in the Atlassian Confluence data center and server. The /server-info.action endpoint is used to pass the bootstrapStatusProvider.applicationConfig.setupComplete parameter, leaving the server in an incomplete state to access restricted endpoints and create unauthorized Confluence administrator accounts. Log in to the Confluence instance backend. |
