module
Atlassian Confluence Namespace OGNL Injection
| Disclosed |
|---|
| Jun 2, 2022 |
Disclosed
Jun 2, 2022
Description
This module exploits an OGNL injection in Atlassian Confluence servers. A specially crafted URI can be used to
evaluate an OGNL expression resulting in OS command execution.
evaluate an OGNL expression resulting in OS command execution.
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.