Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Platform
Modern NDR
Resources
DETECTION OVERVIEW
Risk Factors
Vulnerable Atlassian Confluence instances are being actively attacked. Simple exploit code is publicly available for this remote code execution (RCE) vulnerability. An unauthenticated attacker could gain complete control of a device, steal sensitive information, or launch additional attacks on the network.
Kill Chain
Risk Score
87
Object-Graph Navigation Language (OGNL) is an expression language for setting Java object properties in web applications. Atlassian Confluence Server and Data Center is a wiki tool with an OGNL injection vulnerability that allows an unauthenticated attacker to run arbitrary code on a server hosting Atlassian Confluence. An attacker creates an HTTP POST request that delivers malicious OGNL code to a web form. The malicious code runs on the server and the attacker can gain access to the server.
