Exploit for Use of Hard-coded Credentials in Atlassian Questions For Confluence CVE-2022-26138

githubexploit · 2022-07-30

Description

Confluence Hardcoded Password CVE-2022-2613

Affected Atlassian Questions For Confluence versions

Atlassian Questions For Confluence= 2.7.34, 2.7.35, 3.0.2

All known vulnerabilities by product

Questions For Confluence Confluence

CVSS 9.8 for CVE-2022-26138

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

93%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

98.2%higher than 99.9% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-11-16 19:52

Last Seen:2025-08-31 21:24

Reporter:z92g

Written in:Go

Last commit:2022-07-30

Exploit Code

README14 lines

## https://sploitus.com/exploit?id=120220D8-2281-57EE-BD84-1A33B8841E56
# CVE-2022-26138  
# 1. Introduction  
Confluence Hardcoded Password Detection Tool  

# 2. Usage  
```bash
poc -f host.txt  # Batch scanning  
poc -h 192.168.1.1  # Single scan  
```  
![Image](https://user-images.githubusercontent.com/108780847/181880291-6ad1d033-7a43-41a4-bb22-3fbb38933204.png)  

# 3. Disclaimer  
This tool is intended only for learning, research, and self-checking purposes. It should not be used for illegal purposes. Please comply with relevant laws and regulations. Any risks arising from the use of this tool are not my responsibility!

Exploit Code

Share

Share on social media: