Description
Confluence 是由 Atlassian 开发的企业级协作软件。2023年10月31日，Atlassian 官方披露 CVE-2023-22518 Atlassian Confluence Data Center & Server 权限提升漏洞。攻击者可构造恶意请求创建管理员，从而登录系统，最终可导致远程代码执行。
Atlassian Confluence 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html
https://github.com/AboSteam/POPC/blob/main/Atlassian%20Confluence%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2023-22527).md
https://www.cnblogs.com/zhibing/p/16893826.html
https://itsc.nju.edu.cn/39/01/c41947a538881/page.htm
https://www.secrss.com/articles/66355
https://www.exploit-db.com/exploits/51904
https://projectdiscovery.io/blog/atlassian-confluence-ssti-remote-code-execution
https://nvd.nist.gov/vuln/detail/cve-2023-22527
https://cloud.tencent.com/developer/article/2436353
https://blog.nsfocus.net/confluencecve-2024-21683/