CVE-2021-26084

Related Files

Atlassian Confluence Namespace OGNL Injection

Posted Jun 8, 2022

Authored by unknown, Spencer McIntyre, jbaines-r7, bturner-r7 | Site metasploit.com

This Metasploit module exploits an OGNL injection in Atlassian Confluence servers. A specially crafted URI can be used to evaluate an OGNL expression resulting in OS command execution.

tags | exploit

advisories | CVE-2021-26084

SHA-256 | 648d8ece02bf7d7dd92d3c2ff78f2d3824ad3f28474f3d288194a271823bc243

Download | Favorite | View

Atlassian Confluence WebWork OGNL Injection

Posted Sep 10, 2021

Authored by wvu, Jang, Benny Jacob | Site metasploit.com

This Metasploit module exploits an OGNL injection in Atlassian Confluence's WebWork component to execute commands as the Tomcat user.

tags | exploit

advisories | CVE-2021-26084

SHA-256 | 78b308738c153a19545165ba47b4b15d6c0473eedcb99a8170d7a8e03183480a

Download | Favorite | View

Confluence Server 7.12.4 OGNL Injection Remote Code Execution

Posted Sep 1, 2021

Authored by h3v0x

Confluence Server version 7.12.4 unauthenticated OGNL injection remote code execution exploit.

tags | exploit, remote, code execution

advisories | CVE-2021-26084

SHA-256 | edfa2004247afa5b006485a948fb93b61c91fbe8e09997fd1180dcd5758b7ddc

Download | Favorite | View