Atlassian Confluence SSTI RCE (CVE-2023-22527)

Exploits CVE-2023-22527 OGNL injection on /template/aui/text-inline.vm to run arbitrary OS commands via freemarker Execute.exec. Confluence 8.0.0–8.5.3 are affected. !/usr/bin/env python3 -- coding: utf-8 -- """Atlassian Confluence SSTI / OGNL RCE CVE-2023-22527 — reverse CMD session.""" from...

Atlassian Confluence CVE-2023-22527 Detection

Detects CVE-2023-22527 template injection on /template/aui/text-inline.vm via a non-destructive OGNL header write no command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Atlassian Confluence CVE-2023-22527 SSTI / OGNL detection.""" from kittysploit import from...