Added Template for CVE-2023-22527 (atlassian-confluence-ssti-remote-code-execution) #8982
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Co-Authored-By: Harsh Jaiswal <21000421+rootxharsh@users.noreply.github.com> Co-Authored-By: Rahul Maini <31939327+iamnoooob@users.noreply.github.com>
|
Good job! But if the target machine has traffic devices blocking curl and DNS, it will lead to incorrect results. Perhaps setting the response headers through org.apache.struts2.ServletActionContext is a good approach. Please refer to https://github.com/Avento/CVE-2023-22527_Confluence_RCE for more details. |
ehsandeep
commented
Jan 23, 2024
There was a problem hiding this comment.
@Luoooio @DhiyaneshGeek @iamnoooob updated the payload, executing whoami cmd that works for both win / unix system!
echo http://localhost | nuclei -t http/cves/2023/CVE-2023-22527.yaml
__ _
____ __ _______/ /__ (_)
/ __ \/ / / / ___/ / _ \/ /
/ / / / /_/ / /__/ / __/ /
/_/ /_/\__,_/\___/_/\___/_/ v3.1.7
projectdiscovery.io
[INF] Current nuclei version: v3.1.7 (latest)
[INF] Current nuclei-templates version: v9.7.4 (latest)
[WRN] Scan results upload to cloud is disabled.
[INF] New templates added in latest release: 6
[INF] Templates loaded for current scan: 1
[WRN] Executing 1 unsigned templates. Use with caution.
[INF] Targets loaded for current scan: 1
[CVE-2023-22527] [http] [critical] http://localhost/template/aui/text-inline.vm ["nt authority\\network service"]
DhiyaneshGeek
approved these changes
Jan 24, 2024
|
Hello author, I wonder why I can rebuild POC with burp suite but cannot reach same result with my python code. I passed label as parameter but tried lots of times failed, do you know why |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Template / PR Information
Template Validation
I've validated this template locally?
Additional Details (leave it blank if not applicable)
Additional References: