Atlassian Confluence OGNL Injection RCE Vulnerability (CVE‑2022‑26134) | Qualys
Summary: On June 02, 2022, Atlassian published an advisory for CVE-2022-26134, an unauthenticated OGNL injection remote code execution vulnerability in Confluence Server and Data Center affecting versions after 1.3.0, rated 9.8 on CVSSv3 and reported as actively exploited. A remote attacker can send a malicious HTTP GET request with an OGNL payload in the URI, allowing command execution with the privileges of the user running Confluence; the flaw is fixed in versions 7.4.17, 7.13.7, 7.14.3, 7.15.2, 7.16.4, 7.17.4 and 7.18.1.
What's compelling: This is a 9.8-severity flaw that requires no authentication and was already being actively exploited when Atlassian disclosed it, so any Confluence instance still on a version after 1.3.0 and below the fixed releases is exposed to remote command execution by anyone who can reach it.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-26134
- Related
- CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Jun 02, 2022