Find Atlassian Confluence via HTTP Header (Atlassian Confluence Data Center)

ordieclam · June 7, 2022, 3:55am

HTTP Header doesn’t lie
CVE-2022-26134 : Atlassian Confluence Sever ver 7.18.1 RCE PoC via OGNL injection vulnerability

shatteredglassedge · June 7, 2022, 5:23am

user32 · June 7, 2022, 5:23am

Hasn’t been a good 12 months for Atlassian.

xxlsquireelxx · June 7, 2022, 5:28am

Good thread by Kevin Beaumont:

Zoose · June 7, 2022, 5:29am

There’s a little more detail in this Bleeping Computer article (though it mostly restates what’s in the Volexity post): Critical Atlassian Confluence zero-day actively used in attacks

atlas21123 · June 7, 2022, 5:30am

We just put ours behind our vpn only. Figured it was fairly bad when their workaround was “have you tried turning it off?”