Confluence ONGL Injection - CVE-2022-26134

Confluence ONGL Injection - CVE-2022-26134

CVEs

9.8 Critical Severity

Apps

7.19.11.*
7.19.26.*
7.19.27.*
7.19.23.*
7.19.28.*
7.19.15.*
7.19.24.*
7.19.25.*
7.19.30.*
7.19.21.*
7.19.14.*
7.19.21.*
7.19.22.*
7.19.20.*
7.19.19.*
7.19.18.*
7.19.17.*
7.19.16.*
7.19.9.*
7.17.5.*

Screenshots from the blog posts

blog-posts/images/clbak1bc84n0p0kptaipxb6fg.pngblog-posts/images/clbak1bc84n0p0kptaipxb6fg.png

Summary

Confluence Server and Data Center, an OGNL injection - an unauthenticated attacker execute arbitrary code

Description

Total vcoins

0

Comments (0)