Description
Atlassian Confluence是一款企业知识管理与协作软件。该漏洞存在于Atlassian Confluence的/json/setup-restore.action接口中，可能允许攻击者在受影响的Confluence服务器上执行任意代码。成功利用此漏洞可能导致服务器被完全控制、敏感数据泄露或系统崩溃等严重后果。
Atlassian Confluence /json/setup-restore.action 文件上传漏洞（CVE-2023-22518）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html
https://nvd.nist.gov/vuln/detail/CVE-2023-22518
https://github.com/ForceFledgling/CVE-2023-22518
https://support.atlassian.com/atlassian-knowledge-base/kb/faq-for-cve-2023-22518/
https://www.rapid7.com/blog/post/2023/11/06/etr-rapid7-observed-exploitation-of-atlassian-confluence-cve-2023-22518/
https://projectdiscovery.io/blog/atlassian-confluence-auth-bypass
https://www.huntress.com/blog/confluence-to-cerber-exploitation-of-cve-2023-22518-for-ransomware-deployment
https://jira.atlassian.com/browse/CONFSERVER-93142
https://www.uptycs.com/blog/threat-research-report-team/atlassian-confluence-improper-authorization-vulnerability-cve-2023-22518
https://inhann.top/2023/11/13/confluence-json-restore/