CVE-2023-22506
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-22506 is a high severity Injection and Remote Code Execution vulnerability affecting Bamboo Data Center version 8.0.0. With a CVSS score of 7.5, this vulnerability enables authenticated attackers to manipulate system calls and execute arbitrary code, resulting in significant impacts to confidentiality, integrity, and availability, with no user interaction required. Atlassian strongly urges users to upgrade to the latest version or fixed versions 9.2.3 and 9.3.1. The latest Bamboo Data Center and Server downloads can be obtained from Atlassian's download center. This vulnerability was discovered during Atlassian's Penetration Testing program.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.