CVE-2022-26134 PoC — Atlassian Confluence Server 注入漏洞

Source

https://github.com/kelemaoya/CVE-2022-26134

Associated Vulnerability

Title:Atlassian Confluence Server 注入漏洞 (CVE-2022-26134)
Description:In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Description

Confluence Server and Data Center存在一个远程代码执行漏洞，未经身份验证的攻击者可以利用该漏洞向目标服务器注入恶意ONGL表达式，进而在目标服务器上执行任意代码。

Readme

## **CVE-2022-26134**
##  ATLASSIAN-Confluence   RCE
## 安装

```
git clone https://github.com/kelemaoya/CVE-2022-26134.git
cd CVE-2022-26134
pip3 install -r requirements.txt
```

## 使用
单个url

pocsuite -r ../CVE-2022-26134.py  -u url --verify

批量URL

pocsuite -r ../CVE-2022-26134.py -f url.txt --verify

```

## 免责声明🧐

本工具仅面向合法授权的企业安全建设行为，如您需要测试本工具的可用性，请自行搭建测试环境。

在使用本工具进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。请勿对非授权目标进行扫描。

如您在使用本工具的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。

File Snapshot


 [4.0K]  /data/pocs/9eee85d0c22bca88fb10f672d5e7c876eddd1a33
├── [4.4K]  CVE-2022-26134.py
└── [ 790]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!