{"cvss":10.0,"datePublished":"2024-01-24","dateUpdated":"2024-01-24","description":"Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution.","dueDate":"2024-02-14","id":"CVE-2023-22527","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-22527","product":"Confluence Data Center and Server","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","vendor":"Atlassian"}