Exploit for Improper Input Validation in Atlassian Confluence Data Center CVE-2023-22515

Name: Exploit for Improper Input Validation in Atlassian Confluence Data Center CVE-2023-22515
Rating: 5 (263 reviews)

2023-10-20 | CVSS 9.8

## https://sploitus.com/exploit?id=82F51F0C-3561-5A7D-8D54-85449A45B942
Confluence获取后台权限后的一种rce方式


# 手动Getshell步骤
您可以在后台上传自定义的插件来实现rce

![](img/Snipaste_2023-10-20_16-12-11.jpg)

![](img/Snipaste_2023-10-20_16-22-15.jpg)


访问plugins/servlet/com.jsos.shell/ShellServlet

![](img/Snipaste_2023-10-20_16-14-11.jpg)