← Back to browse · API

CVE-2023-22524

Severity
CRITICAL
CVSS
9.6
EPSS
0.24725
Risk score
47.05
CISA KEV
No
PoC
No
Published
2023-12-06
Modified
2026-02-25
First seen
2026-08-07
Aliases
EUVD-2023-26664, GHSA-95XR-54M7-V6VF
Products
Atlassian:Companion for Mac 1.0.0, Atlassian:Companion for Mac 1.1.0, Atlassian:Companion for Mac 1.2.0, Atlassian:Companion for Mac 1.2.2, Atlassian:Companion for Mac 1.2.3, Atlassian:Companion for Mac 1.2.4, Atlassian:Companion for Mac 1.2.5, Atlassian:Companion for Mac 1.2.6, Atlassian:Companion for Mac 1.3.0, Atlassian:Companion for Mac 1.3.1, Atlassian:Companion for Mac 1.4.1, Atlassian:Companion for Mac 1.4.2, Atlassian:Companion for Mac 1.4.3, Atlassian:Companion for Mac 1.4.4, Atlassian:Companion for Mac 1.4.5, Atlassian:Companion for Mac 1.4.6, Atlassian:Companion for Mac 1.5.0, Atlassian:Companion for Mac 1.6.0, Atlassian:Companion for Mac 1.6.1
Sources
euvd EUVD-2023-26664

Description

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.

References