critical9.8
CVE-2023-22524
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability.
Impact
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Companion | from 1.0.0 before 2.0.0 |
References
- NVD record
- CVE.org record
- https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html
- https://jira.atlassian.com/browse/CONFSERVER-93518
- https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html
- https://jira.atlassian.com/browse/CONFSERVER-93518