References https://nvd.nist.gov/vuln/detail/CVE-2022-26134 https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html https://www.anquanke.com/post/id/274026 https://github.com/vulhub/vulhub/blob/master/confluence/CVE-2022-26134/README.zh-cn.md https://www.cnblogs.com/zhibing/p/16893826.html https://whoopsunix.com/docs/components/Confluence/CVE-2022-26134/ https://developer.aliyun.com/article/1147780 https://c-hasel.github.io/2022/06/14/CVE-2022-26134-Confluence%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/ https://blog.csdn.net/weixin_43700866/article/details/125130325 https://isecurity.huawei.com/sec/web/viewAlert.do?id=2418 https://doc.devpod.cn/conf/confluence-cve-2022-26134-ognl-29818882.html https://blog.play2win.top/2022/06/08/Confluence%20OGNL%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5%E5%88%86%E6%9E%90%EF%BC%88CVE-2022-26134%EF%BC%89/ https://cloud.tencent.com/developer/inventory/21668/article/2040998 https://github.com/jbaines-r7/through_the_wire https://www.rapid7.com/blog/post/2022/06/02/active-exploitation-of-confluence-cve-2022-26134/ https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/
Related VulnerabilitiesPoCCVE-2026-27826: mcp-atlassian < 0.17.0 - Server-Side Request ForgeryMCP Atlassian 存在SSRF漏洞(CVE-2026-27826)PoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request ForgeryPoCCVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞CVE-2019-3396: Atlassian Confluence Path TraversalAtlassian Confluence /json/setup-restore.action 文件上传漏洞(CVE-2023-22518)PoCCVE-2015-8399: Atlassian Confluence <5.8.17 - Information DisclosurePoCCVE-2017-9506: Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request ForgeryPoCCVE-2018-20824: Atlassian Jira WallboardServlet <7.13.1 - Cross-Site ScriptingPoCCVE-2018-5230: Atlassian Jira Confluence - Cross-Site Scripting