Summary

An OGNL injection was discovered in some versions of Atlassian Confluence. The affected versions are prone to RCE via an unauthenticated attacker, making this issue critical. This post breaks down the working of the existing exploit for this CVE, showcasing the complete exploitation process to get a shell on the underlying confluence server.

Script link

CVE-2023-22527-POC/CVE-2023-22527.py at main · Manh130902/CVE-2023-22527-POC

A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center. - Manh130902/CVE-2023-22527-POC

Description