CVE-2022-26134

KO | EN

gitlite — search

#python #hacktoberfest #ai #typescript #go #android #rust #linux #docker #nodejs #java #security #mcp #openai

(★ 14)

「💥」CVE-2022-26134 - Confluence Pre-Auth RCE

CVE-2022-26134 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

## Description

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

## Demo

![demo](https://raw.githubusercontent.com/AmoloHT/CVE-2022-26134/main/demo.png)

![demo2](https://raw.githubusercontent.com/AmoloHT/CVE-2022-26134/main/demo2.png)

## Usage

```
pip install requests
git clone https://github.com/AmoloHT/CVE-2022-26134
cd CVE-2022-26134
python3 cve-2022-26134.py -cmd 'id' -u http://TARGET.TLD
```

## Reference

* URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26134
* MISC:http://packetstormsecurity.com/files/167430/Confluence-OGNL-Injection-Remote-Code-Execution.html
* URL:http://packetstormsecurity.com/files/167430/Confluence-OGNL-Injection-Remote-Code-Execution.html
* MISC:http://packetstormsecurity.com/files/167431/Through-The-Wire-CVE-2022-26134-Confluence-Proof-Of-Concept.html
* URL:http://packetstormsecurity.com/files/167431/Through-The-Wire-CVE-2022-26134-Confluence-Proof-Of-Concept.html
* MISC:http://packetstormsecurity.com/files/167432/Confluence-OGNL-Injection-Proof-Of-Concept.html
* URL:http://packetstormsecurity.com/files/167432/Confluence-OGNL-Injection-Proof-Of-Concept.html
* MISC:http://packetstormsecurity.com/files/167449/Atlassian-Confluence-Namespace-OGNL-Injection.html
* URL:http://packetstormsecurity.com/files/167449/Atlassian-Confluence-Namespace-OGNL-Injection.html
* MISC:https://jira.atlassian.com/browse/CONFSERVER-79016
* URL:https://jira.atlassian.com/browse/CONFSERVER-79016

CVE-2022-26134

CVE-2022-26134 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

CVE-2022-26134

CVE-2022-26134 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README