BBD-YZZ/Confluence-RCE

PoC

confluence rce (CVE-2021-26084, CVE-2022-26134, CVE-2023-22527)

view exploit source poc_in_githubauthor BBD-YZZpublished 2024-05-29catalog poc_in_github
01

exploited CVEs (3)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-22527UScritical9.8OT criticalKEV
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using…
CVE-2022-26134UScritical9.8OT criticalKEV
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Conflu…
CVE-2021-26084UScritical9.8OT criticalKEV
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Conflu…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan