Sploitus

Exploit for Expression Language Injection in Atlassian Confluence Data Center

githubexploit Β· 2023-07-30

Exploit Code

README2 lines
## https://sploitus.com/exploit?id=CFDC15EB-BE4F-5C86-B8B0-C542A791F67D
PoC exploit for CVE-2022-26134, a Confluence pre-auth remote code execution vulnerability via OGNL injection. The target product/service is Atlassian Confluence. The vulnerability class/vector is RCE (Remote Code Execution) via OGNL injection. The probable entry point is the `exploit.py` script. Notable dependencies/tooling include YARA and the `confluence` library. The execution context is a Python script invoked via CLI. Preconditions include a vulnerable Confluence version. Expected impact is remote code execution.