CVE-2023-22518

This repository contains a functional exploit for CVE-2023-22518, an improper authorization vulnerability in Atlassian Confluence Data Center and Server. The exploit leverages the `/json/setup-restore.action` endpoint to bypass authentication and restore a malicious database backup, potentially leading to remote code execution.

The repository contains a functional exploit for CVE-2023-22518, an improper authorization vulnerability in Confluence Server. The exploit sends a crafted multipart/form-data request to the `/json/setup-restore.action` endpoint to trigger the vulnerability and checks for specific response patterns to confirm exploitation.

This repository contains a functional exploit for CVE-2023-22515 (authentication bypass) and a checker for CVE-2023-22518 (SSRF) in Atlassian Confluence. The exploit automates the creation of an admin account by leveraging the vulnerability.

The repository contains a functional exploit script for CVE-2023-22518, which targets an unauthorized file upload vulnerability in Atlassian Confluence. The script sends a crafted POST request with a malicious ZIP file to achieve potential remote code execution.

This repository provides a detailed technical analysis of CVE-2023-22518, an improper authorization vulnerability in Confluence. It includes setup instructions, debugging steps, and an explanation of the root cause involving namespace routing and interceptor bypass in Struts.

This repository provides a detailed technical analysis of CVE-2023-22518, an improper authorization vulnerability in Atlassian Confluence. It includes setup instructions, debugging steps, and an explanation of the root cause involving namespace routing and interceptor bypass in Struts.

This repository contains a functional exploit for CVE-2023-22518, an improper authorization vulnerability in Atlassian Confluence Server and Data Center. The exploit leverages a bypass in the WebSudoInterceptor to upload a malicious ZIP file via the `/json/setup-restore.action` endpoint, leading to remote code execution.

This repository contains a functional exploit for CVE-2023-22518, targeting Atlassian Confluence. The exploit leverages a path traversal vulnerability in the setup-restore action to upload a malicious zip file, potentially leading to remote code execution (RCE).

This Metasploit module exploits CVE-2023-22518, an improper authorization vulnerability in Atlassian Confluence, allowing unauthenticated attackers to reset the instance and create an admin account. It then leverages this access to upload a malicious JSP plugin for remote code execution.