Atlassian Confluence 需授权 安全缺陷漏洞 可导致远程代码执行

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://poc.shuziguanxing.com/#/publicIssueInfo#issueId=11270

Related Vulnerabilities

• PoCCVE-2026-21589: Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read
• PoCCVE-2026-27826: mcp-atlassian < 0.17.0 - Server-Side Request Forgery
• MCP Atlassian 存在SSRF漏洞(CVE-2026-27826)
• PoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request Forgery
• PoCCVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)
• Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞
• CVE-2019-3396: Atlassian Confluence Path Traversal
• Atlassian Confluence /json/setup-restore.action 文件上传漏洞（CVE-2023-22518）
• PoCCVE-2015-8399: Atlassian Confluence <5.8.17 - Information Disclosure
• PoCCVE-2017-9506: Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery
• PoCCVE-2018-20824: Atlassian Jira WallboardServlet <7.13.1 - Cross-Site Scripting