Add PoC exploit for CVE-2023-22527 - Githubissues

ronin-rb / community-pocs

A repository of PoCs for ronin-exploits

https://ronin-rb.dev

GNU General Public License v3.0

0 stars 2 forks source link

Add PoC exploit for CVE-2023-22527 #36

Open postmodern opened 5 months ago

postmodern commented 5 months ago

Add a PoC exploit for CVE-2023-22527, SSTI that allows RCE in Confluence Data Center and Server.

Reference PoCs

https://github.com/YongYe-Security/CVE-2023-22527/blob/main/CVE-2023-22527.py#L44
https://github.com/MaanVader/CVE-2023-22527-POC/blob/master/exploit.py#L24-L33
https://github.com/yoryio/CVE-2023-22527/blob/main/CVE-2023-22527.py (contains a vulnerable version check)
https://github.com/Manh130902/CVE-2023-22527-POC/blob/main/CVE-2023-22527.py (extracts the version from the HTML and performs a vulnerable version check)
https://github.com/Niuwoo/CVE-2023-22527/blob/main/CVE-2023-22527.py#L29-L30 (contains a vulnerability test)

Vuln App

https://github.com/vulhub/vulhub/tree/639e32be6c0425b11d7d56594761c5e599a6a9d5/confluence/CVE-2023-22527

How to Submit a PoC

See the CONTRIBUTING file for instructions on how to submit a PoC exploit.