CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates.
Published Jan 16, 2024 · Updated Jun 17, 2026
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.
Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.
References
- https://confluence.atlassian.com/pages/viewpage.action?pageId=1333335615
- https://jira.atlassian.com/browse/CONFSERVER-93833
- https://www.vicarius.io/vsociety/posts/pwning-confluence-via-ognl-injection-for-fun-and-learning-cve-2023-22527
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-22527
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Atlassian vulnerabilities
All Atlassian entriesCVE-2026-21589
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
critical7.5ExploitedOct 5, 2026CVE-2023-22518
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
critical9.8ExploitedOct 31, 2023CVE-2023-22515
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
critical9.8ExploitedOct 4, 2023CVE-2022-36804
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
high8.8ExploitedAug 25, 2022CVE-2022-26138
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
critical9.8ExploitedJul 20, 2022CVE-2022-26134
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
critical9.8ExploitedJun 3, 2022