3 ms·
From: https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html https://confluence.atlassian.com/doc/confluence-security-adv.
by tyingq 4y ago
From: https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html https://confluence.atlassian.com/doc/confluence-security-adv...
"If you are unable to take the above actions implementing a WAF (Web Application Firewall) rule which blocks URLs containing ${ may reduce your risk."
Smells like log4j issues?
Edit: Ah, template injection, see below.
- technion 4y agoIt's a common pattern in Java injection vulnerabilities. You can see an example here: https://portswigger.net/research/server-side-template-injection https://portswigger.net/research/server-side-template-inject...