Critical Software Fixes from Atlassian Prevent Remote Code Execution

Four serious vulnerabilities in Atlassian’s software that might allow for remote code execution if properly exploited have been fixed with software updates.

Below is a list of vulnerabilities:

CVE-2022-1471 (with a CVSS of 9.8) - A vulnerability in the SnakeYAML library's deserialization that allows for remote code execution in a number of products
CVE-2023-22522 (with a 9.0 CVSS score) - Confluence Data Center and Confluence Server remote code execution vulnerability (affects all versions including and after 4.0.0)
CVE-2023-22523 (with a 9.8 CVSS score) - Assets Discovery for Jira Service Management Cloud, Server, and Data Center has a remote code execution vulnerability that affects all versions up to and excluding 3.2.0-cloud and 6.2.0 data center and server.
The Atlassian Companion app for macOS has a remote code execution vulnerability (CVE-2023-22524; CVSS score: 9.6) that affects all versions up to but excluding 2.0.0.