For reference, the tweets are as follows: -- Discovered by a fried of mine: CVE-2022-26138: A remote, unauthenticated attacker with knowledge of the hardcode

For reference, the tweets are as follows: -- Discovered by a fried of mine: CVE-2022-26138: A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit this to log into Confluence and access all content accessible to users in the confluence-users group The password is disabled1system1user6708 Proof: https://packages.atlassian.com/maven-atlassian-external/com/atlassian/confluence/plugins/confluence-questions/3.0.2/confluence-questions-3.0.2.jar https://packages.atlassian.com/maven-atlassian-external/com/... Also saved to the @internetarchive just to make sure, it stays online: https://web.archive.org/web/20220720225515/https://d34y9yt11qeow3.cloudfront.net/filestore/0d/0de9e967a46863b23fd381d1929c5a6351f1cbfc?response-content-type=application%2Fjava-archive&response-content-disposition=attachment%3B%20filename%3D%22confluence-questions-3.0.2.jar%22%3B%20filename%2A%3DUTF-8%27%27confluence-questions-3.0.2.jar&Expires=1658358314&Signature=ItPkOeFqDm5xROxtxThsVYp~fow08JnHJXQDaCu7~QrIxkbF3VcBmh8mCnJoZkIYi0zJQBCRUC2fR3yHJOFGl8yhUdg5S89HkQwHBRuIPkzflUXFEXgTs6ANCL3Yylj6kj~9BUxLegCKeCy1sdlJEQi9~gJOgoglg91j0dMTRjcXUD7b0xbohNswLjvVjPX~aWbt04293Vx1lQrL~4-cPbkbL7npgXMrgP-vUT-FIJ47RbEwHZOozw9c6HnwUcxaByDCyiEySEbOwYFNcsP6ptoV3fe2iewO00QeURXrNLFF7Nb7GzhP1J~oRwZffwB12uPaVfXEhRorCdO9Qzdu6w__&Key-Pair-Id=APKAIJLYLBQB5QQNWHHQ https://web.archive.org/web/20220720225515/https://d34y9yt11...