Understanding the Recent Confluence Vulnerability (CVE-2023-22515) and Digging into Atlassian Bamboo

Overview Recently, Rapid7 disclosed a vulnerability within Confluence that allowed a remote unauthenticated attacker to create a new administrative user account by bypassing the XWork SafeParameterFilter functionality. Our vulnerability research team decided to take a look at another Atlassian product, Atlassian Bamboo, to determine if a similar vulnerability existed within that application. In this post, […]

The post Understanding the Recent Confluence Vulnerability (CVE-2023-22515) and Digging into Atlassian Bamboo appeared first on Praetorian.

account atlassian attacker bamboo bypassing confluence confluence vulnerability cve cve-2023-22515 labs product rapid7 research team unauthenticated understanding vulnerability vulnerability research vulnerability research team