## https://sploitus.com/exploit?id=0DD93339-26D6-52D0-B646-8F5B03FBC78F
# Atlassian Confluence CVE Vulnerability Reproduction Sandbox
> **Disclaimer**: This project is intended solely for security research and educational purposes. Do not use the exploit code in this project for unauthorized penetration testing. Ensure you have obtained proper authorization before using it in any testing environment. Users are solely responsible for any legal consequences resulting from the misuse of this project’s content.
## Project Overview
This testbed contains Dockerized reproduction environments for multiple high-risk/critical vulnerabilities in Atlassian Confluence. These vulnerabilities have been widely exploited in real-world attacks and are all included in the CISA KEV (Known Exploited Vulnerabilities) catalog.
Each vulnerability includes:
- `docker-compose.yml` — One-click startup for the test environment
- `poc.sh` — Executable vulnerability verification script
- `README.md` — Detailed analysis of the vulnerability’s mechanism and reproduction steps
## Vulnerability List
| CVE ID | Vulnerability Type | CVSS | Affected Versions | Recommendations |
|----------|---------|------|---------|------|
| [CVE-2021-26084](./CVE-2021-26084/) | OGNL Injection (RCE) | 9.8 | Confluence Settings -> Resources -> Memory -> Set to 4GB or higher
- **Linux**: Uses host memory by default; typically no additional configuration is required
## Recommended Learning Path
### Getting Started
1. **CVE-2022-26134** (URL OGNL Injection) — The simplest and most intuitive; can be triggered with a single `curl` command, ideal for understanding the basic principles of OGNL injection
2. **CVE-2021-26084** (OGNL Injection) — Injection via POST parameters; helps understand the principles of server-side expression injection
3. **CVE-2023-22515** (Privilege Escalation) — Understand access control vulnerabilities and learn exploitation strategies for logic-based vulnerabilities
4. **CVE-2023-22527** (Template Injection) — Learn SSTI attack techniques and understand the security risks of template engines
### Related Concepts
```
OGNL Injection (CVE-2021-26084 / CVE-2022-26134)
├── Understanding Expression Language Injection (EL Injection)
├── Similar: Spring EL Injection, SpEL Injection
└── Related: Java Deserialization Vulnerabilities (Command Execution Chains)
Privilege Escalation (CVE-2023-22515)
├── Understanding Access Control (IDOR / Broken Access Control)
├── Similar: Unauthorized Access in Spring Actuator
└── Related: OWASP Top 10 - A01 Broken Access Control
Template Injection (CVE-2023-22527)
├── Understanding SSTI (Server-Side Template Injection)
├── Similar: Jinja2 SSTI, Freemarker SSTI
└── Related: Code Injection Vulnerabilities
```
## Quick Start
```bash
# 1. Navigate to a vulnerability directory
cd CVE-2022-26134
# 2. Start the test environment
docker compose up -d
# 3. Wait for Confluence to fully start (about 2–3 minutes)
# You can check the startup status with the following command:
docker compose logs -f confluence
# 4. Run the PoC to verify the vulnerability
./poc.sh
# 5. Clean up the environment after the experiment
docker compose down -v
```
## Important Notes
1. **Startup Time**: Confluence is a Java application; a cold start takes 2–3 minutes. Please be patient.
2. **Port Conflict**: All test environments use port 8090 by default. Please ensure only one environment is running at a time.
3. **Resource Usage**: Confluence consumes a significant amount of memory. Please run `docker compose down -v` promptly after the experiment to free up resources.
4. **Installation Wizard**: Some vulnerabilities (such as CVE-2021-26084) can be exploited without completing the Confluence installation wizard; while others (such as CVE-2023-22515) require specific installation configurations to be triggered
## Reference Resources
- [CISA Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
- [Atlassian Security Advisories](https://www.atlassian.com/trust/security/advisories)
- [OWASP Top 10](https://owasp.org/www-project-top-ten/)