Description
Atlassian Confluence Data Center and Server存在远程代码执行漏洞，此漏洞是程序对用户输入addlanguage.action的数据缺乏校验导致的。
Atlassian Confluence Data Center and Server CVE-2024-21683 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2024-21683
https://jira.atlassian.com/browse/CONFSERVER-95832
https://confluence.atlassian.com/security/security-bulletin-may-21-2024-1387867145.html
https://www.offsec.com/blog/cve-2024-21683/
https://blog.nsfocus.net/confluencecve-2024-21683/
https://www.venustech.com.cn/new_type/aqtg/20240522/27508.html
https://juejin.cn/post/7587779957655175194
https://www.sonicwall.com/blog/confluence-data-center-and-server-remote-code-execution-vulnerability
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Confluence/Confluence%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-21683).md
https://www.secrss.com/articles/66355