Exploit for Improper Input Validation in Atlassian Confluence Data Center CVE-2023-22515

Name: Exploit for Improper Input Validation in Atlassian Confluence Data Center CVE-2023-22515
Rating: 5 (311 reviews)

2023-10-30 | CVSS 9.8

## https://sploitus.com/exploit?id=E194A08D-F06C-5F9A-AF5F-371BDDD2B85E
# Confluence Hack
CVE-2023-22515

## exploit.py
Exploit to create a new admin user \
Compromised audit log: \
![](./audit_log.png) \
As a reverence served: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html and https://github.com/Chocapikk/CVE-2023-22515

## plugin_shellplug.jar
This plugin provides a web-based shell interface for executing command-line commands on a server \
You can install it from the Confluence web admin GUI \
Was found on a server that was live in production \
![](./plugin.png)

## ShellServlet.java
Is the decompiled file of plugin_shellplug.jar

## Tested on
- Confluence Server 8.5.1

## Disclaimer
This repository is provided for educational and informational purposes only. Use it responsibly and only on systems that you have permission to test. Unauthorized access to computer systems is illegal and unethical.