Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2023-22518: Confluence Auth Bypass Restore From Backup RCE #18566

Merged
merged 11 commits into from
Dec 18, 2023
Merged

CVE-2023-22518: Confluence Auth Bypass Restore From Backup RCE #18566

merged 11 commits into from
Dec 18, 2023

Commits on Nov 22, 2023

  1. Auth bypass, auth, shell upload, working

    @jheysel-r7
    jheysel-r7 committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    e6e2106 View commit details
    Browse the repository at this point in the history

Commits on Nov 23, 2023

  1. working end to end unix confluence 7.18

    @jheysel-r7
    jheysel-r7 committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    c0be4c2 View commit details
    Browse the repository at this point in the history

  2. Clean up started

    @jheysel-r7
    jheysel-r7 committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    397b997 View commit details
    Browse the repository at this point in the history

Commits on Dec 11, 2023

  1. Removed unnecessary files in zip backup

    @jheysel-r7
    jheysel-r7 committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    7b74b75 View commit details
    Browse the repository at this point in the history

  2. Added payload plugin mixin

    @jheysel-r7
    jheysel-r7 committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    16dd06b View commit details
    Browse the repository at this point in the history

  3. Refactored module to use mixin

    @jheysel-r7
    jheysel-r7 committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    61414fa View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2023

  1. Documentation and rubocop changes

    @jheysel-r7
    jheysel-r7 committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    862194d View commit details
    Browse the repository at this point in the history

Commits on Dec 14, 2023

  1. Update lib/msf/core/exploit/remote/http/atlassian/confluence/version.rb 

    Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
    @jheysel-r7 @cdelafuente-r7
    jheysel-r7 and cdelafuente-r7 committed Dec 14, 2023
    Configuration menu
    Copy the full SHA
    ef17829 View commit details
    Browse the repository at this point in the history

  2. Update modules/exploits/multi/http/atlassian_confluence_unauth_backup.rb 

    Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
    @jheysel-r7 @cdelafuente-r7
    jheysel-r7 and cdelafuente-r7 committed Dec 14, 2023
    Configuration menu
    Copy the full SHA
    a14b28e View commit details
    Browse the repository at this point in the history

  3. Check method improvement

    @jheysel-r7
    jheysel-r7 committed Dec 14, 2023
    Configuration menu
    Copy the full SHA
    c1459df View commit details
    Browse the repository at this point in the history

Commits on Dec 15, 2023

  1. Removed unnecssary files

    @jheysel-r7
    jheysel-r7 committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    5d5ccd2 View commit details
    Browse the repository at this point in the history