Atlassian CVE-2022-26134
An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability.
easy
To access material, start machines and answer questions login.
On May the 30th, 2022, an organisation named Volexity identified an un-authenticated vulnerability (scoring 9.8 on ) within Atlassian's Confluence Server and Data Center editions (opens in new tab).
Confluence is a collaborative documentation and project management framework for teams. Confluence helps track project status by offering a centralised workspace for members.
The following versions of Confluence are vulnerable to this :
- 1.3.0 -> 7.4.17
- 7.13.0 -> 7.13.7
- 7.14.0 -> 7.14.3
- 7.15.0 -> 7.15.2
- 7.16.0 -> 7.16.4
- 7.17.0 -> 7.17.4
- 7.18.0 -> 7.18.1
You can view the entry for -2022-26134 here (opens in new tab).
You discover a server running Confluence with the version of 7.16.2, is this vulnerable?
Answer format: yay/nay
Ready to learn Cyber Security?
The Atlassian CVE-2022-26134 room is only available for Premium or Max subscribers. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.
Already have an account? Log in