CVE-2023-22527 PoC — Atlassian Confluence 安全漏洞

Source

https://github.com/Chocapikk/CVE-2023-22527

Associated Vulnerability

Title:Atlassian Confluence 安全漏洞 (CVE-2023-22527)
Description:A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.

Description

Atlassian Confluence - Remote Code Execution

Readme

# Atlassian Confluence CVE-2023-22527 Scanner 🛡️

## Overview 🌟
This tool scans for the CVE-2023-22527 vulnerability in Atlassian Confluence, a critical RCE flaw allowing unauthorized remote code execution.

## Features 🚀
- **Single URL Scan**: Scan a specific target for the vulnerability.
- **Bulk Scan**: Process multiple URLs from a file for efficient vulnerability assessment.
- **Concurrency Control**: Utilize threading for faster bulk scanning.
- **Output Logging**: Save vulnerable URLs to a specified file.

## Usage 💻
1. **Single URL Scan**: `python exploit.py -u <URL>`
2. **Bulk Scan**: `python exploit.py -f <file_path>`
3. **Set Threads**: `python exploit.py -t <number_of_threads>`
4. **Output File**: `python exploit.py -o <output_file_path>`

## Requirements 📋
- Python 3.10+
- Dependencies: `requests`, `prompt_toolkit`, `rich`, `alive_progress`

## Installation 🛠️
1. Clone the repository: `git clone https://github.com/Chocapikk/CVE-2023-22527`
2. Install dependencies: `pip install -r requirements.txt`

## Example 🔍
```bash
$ python3 exploit.py -u http://localhost:8092
[+] http://localhost:8092 is vulnerable - confluence
[!] Shell is ready, please type your commands UwU
$ id
uid=2002(confluence) gid=2002(confluence) groups=2002(confluence),0(root)
$ pwd
/var/atlassian/application-data/confluence
$ hostname
ff7bfe2e7109
```

## Disclaimer ⚠️
This tool is intended for security research and should only be used on systems with explicit authorization. Misuse may lead to legal consequences.

## More Information 🔗
For more detailed information about the CVE-2023-22527 vulnerability, refer to the [Project Discovery Blog Post](https://blog.projectdiscovery.io/atlassian-confluence-ssti-remote-code-execution/).

File Snapshot


 [4.0K]  /data/pocs/429de80f60c07de8cd85447e0e32a6750cd01cc2
├── [ 448]  docker-compose.yml
├── [4.8K]  exploit.py
├── [1.7K]  README.md
└── [  53]  requirements.txt

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!