zerofox logo
Advisories

Profile: CVE-2022-26134

|by Alpha Team

banner image

CVE-2022-26134

Product Serial: P-2023-01-06a

TLP:CLEAR

In this profile, ZeroFox Intelligence discusses the risk CVE-2022-26134 poses while covering the technical details and providing a Sigma rule for detection.

Standing Intelligence Requirements

VULN

For the most up-to-date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here.

Current Description

CVE-2022-26134 is an Open Graph Navigation Language (OGNL) injection vulnerability that allows an unauthenticated attacker to execute arbitrary code on affected versions of an Atlassian Confluence server or data center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Tags: vulnerability/exploit,  all industries,  global