CyberWatch

Critical Vulnerability Impacting Confluence Data Centers and Servers

By

By

Access Point Consulting

Summary

This critical vulnerability, defined as CVE-2023-22527 (CVSS 3.0: 10.0), is susceptible to template-injection techniques and affects versions of the software that are out-of-date. If exploited, it can execute code remotely. Users of affected versions are urged by Atlassian to remediate this vulnerability immediately.

Impact Assessment

Atlassian rates this vulnerability as CVSS 10.0 because it has a high impact on confidentiality, integrity, and availability. The versions impacted are Server 8 versions released before December 5, 2023, and version 8.4.5 which is no longer supported by the vendor.

Remediation

Check for affected versions in your environment, including Confluence data centers and servers. If your installed version is affected, remediate by updating those instances.

Business Implications

This vulnerability is not known to be exploited in the wild, but failure to remediate this vulnerability leaves your data centers and servers open to attack. Exploitation can lead to monetary, reputational, and data loss.

Access Point Technology Recommendations

Update

We recommend following vendor instructions to update Confluence data centers and servers to the latest versions.

Associated Bulletins

https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html

https://www.cve.org/CVERecord?id=CVE-2023-22527

https://nvd.nist.gov/vuln/detail/CVE-2023-22527

Resources

Latest Resources

Resources

CyberWatch

April 2, 2025

Scott "Monty" Montgomery (Island) | Navigating CMMC compliance for organizations of every size

Scott Montgomery, known as Monty, joined the CyberWatch Expert Series podcast to discuss his extensive background in cybersecurity, particularly in building and designing network security tools for high-assurance environments like the Department of Defense (DoD) and the intelligence community. His experience includes significant tenure at McAfee (now Trellix), which led him to his current role at Island, where he focuses on innovative approaches to cybersecurity compliance.

Find out more
March 19, 2025

Michael Sviben (DomainGuard) | Defending against phishing and building proactive security awareness

Cybersecurity threats evolve rapidly, and one tactic consistently rises above the rest: phishing. In this episode of CyberWatch, Michael Sviben, co-founder of DomainGuard, discusses why phishing remains so effective, how businesses and individuals become targets, and what you can do to stay vigilant.

Find out more
March 5, 2025

David Habib (Brightspot) | Building a culture of cybersecurity awareness

Cybersecurity awareness is often reduced to check-the-box training, but David Habib, CIO at Brightspot, argues that real security awareness isn’t about formal programs—it’s about making security part of a company’s culture. In this episode, he shares practical insights on how organizations can move beyond stale training sessions to create an engaged and security-conscious workforce.

Find out more