Confluence Common Bugs
Introduction
What would you do if you came across a website that uses Confluence?
How to Detect
Try to HTTP request to https://example.com/login.action?os_destination=%2F
and there is a form login
Find the related CVE by checking Confluence version
How to find the Confluence version
Try to request to https://example.com/login.action?os_destination=%2F
and then check the source code. You will find this line <meta name="ajs-version-number" content="8.20.9">
so 8.20.9 is the Confluence version. If you found outdated Confluence version, find the CVEs at CVEDetails
Some example CVE:
CVE-2022-26134 (Remote Code Execution)
CVE-2021-26085 (Arbitrary File Read)
Last updated