CVE-2023-22524

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.

Affected

Atlassian · Companion for Mac

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0 ATLASSIAN

9.6 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

24.71% chance of exploitation in the next 30 days, 98th percentile

Published

2023-12-06

Updated

2026-02-25

Proof-of-concept exploits (2)

• imperva/CVE-2023-225241★ · 2023-12-20
• ron-imperva/CVE-2023-2252425★ · 2023-12-15

Security advisories

• https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-c…
• https://jira.atlassian.com/browse/CONFSERVER-93518

References

• CVE Record
• NVD entry

Related

• CVE-2025-30065