
Confluence Server and Data Center存在一个远程代码执行漏洞,未经身份验证的攻击者可以利用该漏洞向目标服务器注入恶意ONGL表达式,进而在目标服务器上执行任意代码。
git clone https://github.com/kelemaoya/CVE-2022-26134.git
cd CVE-2022-26134
pip3 install -r requirements.txt
Single URL
pocsuite -r ../CVE-2022-26134.py -u url --verify
Batch URLs
pocsuite -r ../CVE-2022-26134.py -f url.txt --verify
## Disclaimer🧐
This tool is intended only for legally authorized enterprise security construction activities. If you need to test the usability of this tool, please set up your own test environment.
When using this tool for detection, you should ensure that the action complies with local laws and regulations, and that you have obtained sufficient authorization. Do not scan unauthorized targets.
If you engage in any illegal behavior while using this tool, you must bear the corresponding consequences, and we will not assume any legal or joint liability.