CVE-2019-3396

CVE-2019-3396 Vulnerabilidade RCE não autenticada do Confluence CVE-2019-3396 Ponto crítico: algumas versões precisam adicionar o cabeçalho Referer para obter sucesso Leitura de Arquivo root@kitploit: POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent: Mozilla/5.0 Windows N...

Exploit for Path Traversal in Atlassian Confluence_Server

PoC exploit for CVE-2019-3396, a Confluence Server-Side Template Injection SSTI Remote Code Execution RCE vulnerability. The exploit targets Confluence versions vulnerable to this CVE. The vulnerability is exploited by sending a specially crafted request to the Confluence REST API, which allows a...