{"uuid": "100a5c27-147a-41b9-bf8c-3f6ed890c2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-22527", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22527.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Rahul Maini\", \"Harsh Jaiswal\", \"Spencer McIntyre\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an SSTI injection in Atlassian Confluence servers. A specially crafted HTTP request uses\\n          the injection to evaluate an OGNL expression resulting in OS command execution.\\n          Versions 8.5.0 through 8.5.3 and 8.0 to 8.4 are known to be vulnerable.\", \"disclosure_date\": \"2024-01-16\", \"fullname\": \"exploit/multi/http/atlassian_confluence_rce_cve_2023_22527\", \"is_install_path\": true, \"mod_time\": \"2026-02-09 23:03:01 +0000\", \"name\": \"Atlassian Confluence SSTI Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22527.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/atlassian_confluence_rce_cve_2023_22527\", \"references\": [\"CVE-2023-22527\", \"URL-https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html\", \"URL-https://blog.projectdiscovery.io/atlassian-confluence-ssti-remote-code-execution/\", \"ATT&CK-T1190\"], \"rport\": 8090, \"session_types\": false, \"targets\": [\"Unix Command\", \"Windows Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:41.687977Z"}