CVE-2023-22524 (published 2023-12-06T05:00:02.649Z)
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.
Affected products: Vendor: Atlassian
Product: Companion for Mac
Versions: < 1.0.0, >= 1.0.0, >= 1.1.0, >= 1.2.0, >= 1.2.2, >= 1.2.3, >= 1.2.4, >= 1.2.5, >= 1.2.6, >= 1.3.0, >= 1.3.1, >= 1.4.1, >= 1.4.2, >= 1.4.3, >= 1.4.4, >= 1.4.5, >= 1.4.6, >= 1.5.0, >= 1.6.0, >= 1.6.1, >= 2.0.0, >= 2.0.1