VDB
BDU%3A2022-03284
BDU%3A2022-03284
PUBLISHED
CVSS 10 CRITICAL
Уязвимость веб-сервера Atlassian Confluence Server и дата центра Confluence Data Center, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Jira Data Center, Confluence Server |
Timeline
- Jun 2, 2022 PoC Published
- Jun 3, 2022 CVE Published
- Jun 24, 2024 PoC Published
- Sep 24, 2024 CVE Updated
- May 29, 2026 PoC Published
References
- https://www.cybersecurity-help.cz/vdb/SB2022060301 url
- https://www.rapid7.com/blog/post/2022/06/02/active-exploitation-of-confluence-cve-2022-26134/ url
- https://community.atlassian.com/t5/Confluence-discussions/CVE-2022-26134-Critical-severity-unauthenticated-remote-code/td-p/2045653 url
- https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/ url
- https://github.com/offlinehoster/CVE-2022-26134 url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html advisory