Description
Atlassian Confluence存在远程命令执行漏洞，此漏洞是对用户的数据缺乏校验导致的。
Atlassian Confluence CVE-2023-22527 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html
https://nvd.nist.gov/vuln/detail/cve-2023-22527
https://github.com/AboSteam/POPC/blob/main/Atlassian%20Confluence%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2023-22527).md
https://www.secrss.com/articles/62856
https://cloud.tencent.com/developer/article/2407861
https://www.ddpoc.com/DVB-2024-6011.html
https://www.anquanke.com/post/id/301459
https://blog.csdn.net/m0_62146983/article/details/146622815
https://cn.t00ls.com/articles-72408.html
https://sec.bsia.org.cn/4936/202401/59146.html
https://support.atlassian.com/atlassian-knowledge-base/kb/faq-for-cve-2023-22527/
https://jira.atlassian.com/browse/CONFSERVER-93833
https://www.exploit-db.com/exploits/51904
https://www.trendmicro.com/en_us/research/24/b/unveiling-atlassian-confluence-vulnerability-cve-2023-22527--und.html
https://www.vicarius.io/vsociety/posts/pwning-confluence-via-ognl-injection-for-fun-and-learning-cve-2023-22527
https://projectdiscovery.io/blog/atlassian-confluence-ssti-remote-code-execution
https://www.picussecurity.com/resource/blog/cve-2023-22527-another-ognl-injection-leads-to-rce-in-atlassian-confluence
https://www.sentinelone.com/vulnerability-database/cve-2023-22527/
https://www.imperva.com/blog/attackers-quick-to-weaponize-cve-2023-22527-for-malware-delivery/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-22527
https://packetstormsecurity.com/files/176789/Atlassian-Confluence-SSTI-Injection.html