CVE-2023-22524

Critical · 9.8

CVSS

9.8

EPSS

24.7%

Published

Dec 6, 2023

CISA due date

—

The record

Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.

Affected packages

Ecosystem	Package	Introduced	Fixed