CVE-2023-22523

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2023-22523 is a remote code execution vulnerability that exists in the communication path between the Assets Discovery application, formerly known as Insight Discovery, and the Assets Discovery agent. It affects any machine with the Assets Discovery agent installed and carries a CVSS 3.1 score of 8.8 reflecting network attack vector, low attack complexity, and low required privileges.

An authenticated attacker can exploit the flaw over the network to obtain privileged remote code execution, resulting in complete loss of confidentiality, integrity, and availability on the targeted host.

Atlassian has published official security advisories and linked Jira entries that address the issue. The associated EPSS score has remained flat at a peak of 0.0719 since disclosure, indicating no material rise in observed exploitation interest.