{"id":"CVE-2023-22524","aliases":["EUVD-2023-26664","GHSA-95xr-54m7-v6vf"],"status":"published","title":"Certain versions of the Atlassian Companion App for MacOS were affected by a remote code...","description":"Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.","severity":{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.24706,"percentile":0.97921,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2023-12-06T05:00:02Z","modified":"2026-06-17T05:35:38Z","exploits":[{"source":"pocgithub","id":"imperva/CVE-2023-22524","title":"imperva/CVE-2023-22524","date":"2023-12-14","url":"https://github.com/imperva/CVE-2023-22524"},{"source":"pocgithub","id":"ron-imperva/CVE-2023-22524","title":"ron-imperva/CVE-2023-22524","date":"2023-12-14","url":"https://github.com/ron-imperva/CVE-2023-22524"}],"products":[{"vendor":"atlassian","product":"companion"},{"vendor":"atlassian","product":"companion for mac"}],"references":[{"url":"https://confluence.atlassian.com/security/cve-2023-22524-rce-vulnerability-in-atlassian-companion-app-for-macos-1319249492.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://jira.atlassian.com/browse/CONFSERVER-93518","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22524"},{"url":"https://jira.atlassian.com/browse/CONFSERVER-93453"},{"url":"https://github.com/advisories/GHSA-95xr-54m7-v6vf"}],"sources":{"cve":[{"id":"CVE-2023-22524","description":"Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.","status":"published","published":"2023-12-06T05:00:02.649Z","modified":"2026-02-25T16:53:03.327Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-26664","description":"Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.","status":"published","published":"2023-12-06T05:00:02Z","modified":"2026-02-25T16:53:03Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:29.128374Z"}],"ghsa":[{"id":"GHSA-95xr-54m7-v6vf","title":"Certain versions of the Atlassian Companion App for MacOS were affected by a remote code...","description":"Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.","status":"published","published":"2023-12-06T06:30:19Z","modified":"2023-12-11T15:30:49Z","cvss":[{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:55:10.314842Z"}],"nvd":[{"id":"CVE-2023-22524","description":"Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.","status":"published","published":"2023-12-06T05:15:10.267Z","modified":"2026-06-17T05:35:38.137Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":9.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:54.010507Z"}]}}