Actively exploited in the wild
Atlassian Confluence Data Center and Server Template Injection Vulnerability
Atlassian - Confluence Data Center and Server · Listed in the CISA KEV since 2024-01-24. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-22527
CriticalCVSS 9.8KEVSummary
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.
Risk Assessment
This vulnerability allows unauthenticated remote code execution, potentially leading to full compromise of the Confluence server.
Recommendation
Immediately update Confluence Data Center and Server to the latest supported version.
Other vulnerabilities in Confluence Data Center and Server
See all- CVE-2026-21580Critical
A Critical Stored XSS, Privilege Escalation, and Security Misconfiguration vulnerability in Confluence Data Center and Server allows an unauthenticated attacker to execute arbitrary HTML or JavaScript in a victim's browser, perform actions as a higher-privileged user, and exploit security best-practice oversights.
- CVE-2023-22518CriticalActively exploited
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but not limited to - full loss of confidentiality, integrity and availability.
Original NVD description (English source)
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.