.. / CVE-2024-21683

• RCE
• PoC
• Nuclei
• Web

Exploit for Atlassian Confluence Data Center and Server < 8.9.1, 8.5.9, 7.19.22 - Authenticated Remote Code Execution (CVE-2024-21683)

Description:

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and Server. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction. Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version. If you are unable to do so, upgrade your instance to one of the specified supported fixed versions.

Affected Products:

• Atlassian Confluence Data Center and Server 5.X / 6.X < 7.19.22 / 8.5.9 / 8.9.1
• Atlassian Confluence Data Center and Server 7.X < 7.19.22
• Atlassian Confluence Data Center and Server 8.X < 8.5.9 / 8.9.1

Nuclei Template

View the template here CVE-2024-21683.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-21683.yaml

References: