PRP: Request CVE-2021-35464: RCE through Confluence Server OGNL

[1c3t0rm]

Hello,

I would like to start the implementation for a plugin that detects CVE-2021-26084

• The vulnerability should be relatively new and have already been patched. https://jira.atlassian.com/browse/CONFSERVER-67940
• The vulnerability should have a HIGH or CRITICAL severity rating if there is already a CVE ID assigned (CVSS score >= 7.0): CVSS Score: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
• The vulnerability should have a relatively large impact radius. Confluence is actively used by organizations
• The vulnerability should be remotely exploitable without authentication and user interaction. Yes.

Please let me know if this is in scope to start with its development.