Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-79016

Remote code execution via OGNL injection in Confluence Server & Data Center - CVE-2022-26134

XMLWordPrintable

    • 10
    • Critical
    • CVE-2022-26134

      In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance.
       
      The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.
       
      For more information, see https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html

            [CONFSERVER-79016] Remote code execution via OGNL injection in Confluence Server & Data Center - CVE-2022-26134

            Jeremy R made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 805229 ]
            Marissa Jensen (Inactive) made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 707294 ]
            Mohit Sharma made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 674839 ]
            Sunny Wu made changes -
            Remote Link Original: This issue links to "Page (Extranet)" [ 668072 ]
            Sunny Wu made changes -
            Remote Link New: This issue links to "Page (Extranet)" [ 668072 ]
            Adam G. made changes -
            Remote Link Original: This issue links to "Page (Confluence)" [ 662275 ]
            Adam G. made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 662275 ]
            Rachel Robins made changes -
            Remote Link New: This issue links to "Page (Atlassian Documentation)" [ 662078 ]
            Cathy S made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 659379 ]
            Sunny Wu made changes -
            Remote Link New: This issue links to "Page (Extranet)" [ 659235 ]

              Unassigned Unassigned
              security-metrics-bot Security Metrics Bot
              Votes:
              0 Vote for this issue
              Watchers:
              56 Start watching this issue

                Created:
                Updated:
                Resolved: