module
Atlassian Confluence WebWork OGNL Injection
| Disclosed |
|---|
| Aug 25, 2021 |
Disclosed
Aug 25, 2021
Description
This module exploits an OGNL injection in Atlassian Confluence's
WebWork component to execute commands as the Tomcat user.
WebWork component to execute commands as the Tomcat user.
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.