Description
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Companion for Mac | >= 1.0.0; >= 1.1.0; >= 1.2.0; >= 1.2.2; >= 1.2.3; >= 1.2.4; >= 1.2.5; >= 1.2.6; >= 1.3.0; >= 1.3.1; >= 1.4.1; >= 1.4.2; >= 1.4.3; >= 1.4.4; >= 1.4.5; >= 1.4.6; >= 1.5.0; >= 1.6.0; >= 1.6.1 |
References
- https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.htmlVendor Advisory
- https://jira.atlassian.com/browse/CONFSERVER-93518Vendor Advisory
- https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.htmlVendor Advisory
- https://jira.atlassian.com/browse/CONFSERVER-93518Vendor Advisory
Timeline
- Published
- Dec 6, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified