CVE-2022-26134 PoC — Atlassian Confluence Server 注入漏洞

Source

https://github.com/BBD-YZZ/Confluence-RCE

Associated Vulnerability

Title:Atlassian Confluence Server 注入漏洞 (CVE-2022-26134)
Description:In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Description

confluence rce (CVE-2021-26084, CVE-2022-26134, CVE-2023-22527)

Readme

## confluence rce (CVE-2021-26084, CVE-2022-26134, CVE-2023-22527)

### Usage: python3 mian.py

#### 检测

![1](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/1.PNG)

![2](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/2022.PNG)

![3](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/2023.PNG)

#### 命令执行

![4](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/2022_command.PNG)

![5](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/2023_command.PNG)

#### 反弹shell
![6](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/2022_rev.PNG)

![7](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/rev.PNG)

#### 支持socks5和http代理

![8](https://github.com/BBD-YZZ/Confluence-RCE/blob/master/images/proxy.PNG)

*仅用于交流和学习~*

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!