The following is a sample action entry for the doenterpagevariables action: In the above example, the doEnter() method of the “com.atlassian.confluence.pages.actions.PageVariablesAction” class handles requests to “doenterpagevariables.action” and will return values such as “success”, “input”, or “error”, resulting in the ...Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 PUT /logkit/configs/passwdread HTTP/1.1 Host: Accept: */* Accept-Encoding: gzip, deflate Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7,zh-TW;q=0.6 ... On August 25, 2021, Atlassian released a security advisory for their Confluence Server and Data Center.The advisory highlighted an Object-Graph Navigation Language (OGNL) injection that would result in an unauthenticated attacker being able to execute arbitrary code.Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086漏洞复现 . 登录页面如下 . 出现漏洞的文件为 get_luser_by_sshport.php{"payload":{"allShortcutsEnabled":false,"fileTree":{"docs-base/docs/webapp":{"items":[{"name":"images","path":"docs-base/docs/webapp/images","contentType":"directory ...Sep 3, 2021 · “For example, simply visiting /pages/doenterpagevariables.action should render the velocity template file which was modified i.e. createpage-entervariables.vm,” security researcher and bug ... Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 漏洞复现 . 看到产品手册 . 系统默认管理员账号密码： . admin/zxsoft1234!@#$ . 登录页面如上，使用账号密码登录The following is a sample action entry for the doenterpagevariables action: In the above example, the doEnter() method of the “com.atlassian.confluence.pages.actions.PageVariablesAction” class handles requests to “doenterpagevariables.action” and will return values such as “success”, “input”, or “error”, resulting in the ... ; 注意参数 node 中的 cu01 需要为shell集群中的存在主机 . 这里可以配合任意用户登录漏洞查看主机名Sep 22, 2021 · The following is a sample action entry for the doenterpagevariables action: In the above example, the doEnter() method of the com.atlassian.confluence.pages.actions.PageVariablesAction class handles requests to “doenterpagevariables.action” and will return values such as “success”, “input”, or “error”. 为了方便之后的操作，我们将shell转到CS上操作: 翻一下桌面找到flag: 本机信息收集，在C盘根目录下看到了服务器安装了Navicat,猜测Navicat里可能保存了数据库的账号和密码。. Navicat 中保存的所有连接账密，都是直接存到对应注册表项值下的。. 各个数据库连接账密 ...文章目录1. confluence路径穿越与命令之执行 (CVE-2019-3396)1.1 利用2. Confluence OGNL表达式注入代码执行漏洞（CVE-2021-26084）2.1 利用参考文章1. confluence路径穿越与命令之执行 (CVE-2019-3396)影响版本：6.14.2版本前通过该漏洞，攻击者可以读取任意文件，或利用Velocity模板注入执行任意命令。Aug 10, 2022 · Atlassian Confluence是一个专业的企业知识管理与协同软件，也可以用于构建企业wiki。. 。. 该软件可实现团队成员之间的协作和知识共享。. 一共复现5个漏洞：暴力破解、CVE-2015-8399任意文件读取、CVE-2021-26084远程代码执行、CVE-2021-26085受限的文件读取、CVE-2022-26134 OGNL ... Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086/pages/createpage-entervariables.action POST /pages/createpage-entervariables.action HTTP/1.1 Host: 127.0.0.1:8090 Accept-Encoding: gzip, deflate Accept: ` Accept-Language: en User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Connection: close Content-Type: application ... Dec 2, 2021 · 文章目录1. confluence路径穿越与命令之执行 (CVE-2019-3396)1.1 利用2. Confluence OGNL表达式注入代码执行漏洞（CVE-2021-26084）2.1 利用参考文章1. confluence路径穿越与命令之执行 (CVE-2019-3396)影响版本：6.14.2版本前通过该漏洞，攻击者可以读取任意文件，或利用Velocity模板注入执行任意命令。 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086Action 条目中可能包含一个 method属性，允许撤销指定Java类的特定方法。如命令未指定，则调用action类的 doDefault() 方法。如下是 doenterpagevariables action 的action 条目样例：Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086. 可以获取账号密码信息，一路点击右下角的继续将会跳转修改管理员账号密码页面，修改后登录即可获取后台权限La vulnerabilidad es una inyección de Object-Graph Navigation Language (OGNL) en una de las plantillas "Velocity" (motor de plantillas) de Confluence que se podría activar mediante el acceso a "/pages/createpage-entervariables.action" y posiblemente a otras URL también. Algunos exploits de pruebas de concepto (PoC) y nuestros datos sugieren ...Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 IP Abuse Reports for 45.146.164.50: . This IP address has been reported a total of 311 times from 73 distinct sources. 45.146.164.50 was first reported on May 16th 2021, and the most recent report was 1 year ago.BlackBerry® のインシデント対応チーム は、先ごろ発見された Confluence Server と Data Center の脆弱性 ( CVE-2021-26084) で最も一般的な攻撃者の TTP（戦術、技法、手順）について、 ブルーチームの防御の観点に関する記事 で取り上げました。. この記事では、攻撃の ...","renderedFileInfo":null,"shortPath":null,"tabSize":8,"topBannersInfo":{"overridingGlobalFundingFile":false,"globalPreferredFundingPath":null,"repoOwner ...作者：calmness某安全公司技术经理兼项目经理弥天安全实验室核心成员、炎黄安全实验室创始人研究方向：渗透测试、安全运营建设简述2021年08月26日，Atlassian官方发布了ConfluenceOGNL注入漏洞的风险通告，漏洞编号为CVE-2021-26084，漏洞等级：严重，漏洞评分：8.8。. 其中登录接口中 Password为接口中存在的账号密码，可以直接发送请求获取Cookie 漏洞复现 . 登录页面 . 首先查看路由位置 main.go 文件 中的 file 接口对应的函数 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 漏洞描述 . Atlassian Confluence 存在远程代码执行漏洞，攻击者在无需认证，即可构造恶意请求，造成OGNL表达式注入，从而执行任意代码，控制服务器。 漏洞影响 Sep 9, 2021 · Remote attacker in authenticated or in certain circumstances without authentication, by constructing a malicious data OGNL expressions injection attacks to RCE. Affected version: Confluence Server & Confluence Data Center < 6.13.23 Confluence Server & Confluence Data Center < 7.11.6 Confluence Server & Confluence Data Center < 7.12.5 Confluence ... Jan 27, 2022 · 0x02 wiki. 设置代理. 上传frp到windows上 frps.ini WSO2 API Manager 2.2.0 and above WSO2 Identity Server 5.2.0 and above WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0, 5.6.0 WSO2 Identity Server as Key Manager 5.3.0 and above WSO2 Enterprise Integrator 6.2.0 and above . 其中登录接口中 Password为接口中存在的账号密码，可以直接发送请求获取Cookie 漏洞复现 . 登录页面 . 存在漏洞的接口为/tplus/SM/SetupAccount/Upload.aspx, 对应文件 App_Web_upload.aspx.9475d17f.dll . 上传文件 ... ","renderedFileInfo":null,"shortPath":null,"tabSize":8,"topBannersInfo":{"overridingGlobalFundingFile":false,"globalPreferredFundingPath":null,"repoOwner ...; 注意参数 node 中的 cu01 需要为shell集群中的存在主机 . 这里可以配合任意用户登录漏洞查看主机名Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 漏洞描述 Atlassian Confluence 存在远程代码执行漏洞，攻击者在无需认证，即可构造恶意请求，造成OGNL表达式注入，从而执行任意代码，控制服务器。 Jul 13, 2022 · IP Abuse Reports for 198.50.168.185: . This IP address has been reported a total of 22 times from 17 distinct sources. 198.50.168.185 was first reported on June 9th 2021, and the most recent report was 1 week ago. See full list on jacobriggs.io This IP address has been reported a total of 266 times from 25 distinct sources. 194.145.227.21 was first reported on February 16th 2021, and the most recent report was 3 months ago . Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.Looking over some of our honeypot logs today, I noticed one IP address, 60.223.74.99, scanning for several older Confluence vulnerabilities. Confluence is the collaboration component of Atlassian's suite of developer tools [1].执行摘要. 在2021年8月25日，Atlassian在合流服务器和数据中心发布了一个安全 顾问 ，CVE-2021-26084的注入漏洞。. 如果该漏洞被利用， 攻击者可以绕过身份验证并在未打补丁的系统上运行任意代码。. 自本公告发布以来，大规模扫描活动已经开始，寻找未打补丁的 ...Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 漏洞描述 . Atlassian Confluence 存在远程代码执行漏洞，攻击者在无需认证，即可构造恶意请求，造成OGNL表达式注入，从而执行任意代码，控制服务器。 漏洞影响 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 漏洞描述. Atlassian Confluence 存在远程代码执行漏洞，攻击者在无需认证，即可构造恶意请求，造成OGNL表达式注入，从而执行任意代码，控制服务器。 /webservice/get_usedspace.php?site_id=-1159 UNION ALL SELECT CONCAT(0x76756c6e,0x76756c6e,0x76756c6e)--Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 漏洞描述. Atlassian Confluence 存在远程代码执行漏洞，攻击者在无需认证，即可构造恶意请求，造成OGNL表达式注入，从而执行任意代码，控制服务器。 一个综合漏洞知识库，集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库. Contribute to Threekiii/Vulnerability-Wiki development by creating an account on GitHub. In the form, we see the doenterpagevariables.action action in <form> tag. Try to visit the /pages/doenterpagevariables.action URL: The .vm file extension. When we see something new that we probably haven’t hearded of it before, we should read the doc and find out what it is. I love to read the doc and learn about new thing, that’s one of my ...In the form, we see the doenterpagevariables.action action in <form> tag. Try to visit the /pages/doenterpagevariables.action URL: The .vm file extension. When we see something new that we probably haven’t hearded of it before, we should read the doc and find out what it is. I love to read the doc and learn about new thing, that’s one of my ... 漏洞复现 . 登录页面 . 首先查看路由位置 main.go 文件 中的 file 接口对应的函数 Atlassian Confluence是一个专业的企业知识管理与协同软件，也可以用于构建企业wiki。. 。. 该软件可实现团队成员之间的协作和知识共享。. 一共复现5个漏洞：暴力破解、CVE-2015-8399任意文件读取、CVE-2021-26084远程代码执行、CVE-2021-26085受限的文件读取、CVE-2022-26134 OGNL ...Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 Sep 22, 2021 · The following is a sample action entry for the doenterpagevariables action: In the above example, the doEnter() method of the com.atlassian.confluence.pages.actions.PageVariablesAction class handles requests to “doenterpagevariables.action” and will return values such as “success”, “input”, or “error”. Looking over some of our honeypot logs today, I noticed one IP address, 60.223.74.99, scanning for several older Confluence vulnerabilities. Confluence is the collaboration component of Atlassian's suite of developer tools [1].IP Abuse Reports for 194.40.243.73: This IP address has been reported a total of 34 times from 5 distinct sources. 194.40.243.73 was first reported on December 9th 2020 , and the most recent report was 4 months ago . Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer ... POST /tplus/ajaxpro/RecoverPassword,App_Web_recoverpassword.aspx.cdcab7d2.ashx?method=SetNewPwd {\"pwdNew\":\"46f94c8de14fb36680850768ff1b7f2a\"} WSO2 API Manager 2.2.0 and above WSO2 Identity Server 5.2.0 and above WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0, 5.6.0 WSO2 Identity Server as Key Manager 5.3.0 and above WSO2 Enterprise Integrator 6.2.0 and above漏洞复现 . 登录页面 . 存在漏洞的页面为 down.php ","renderedFileInfo":null,"shortPath":null,"tabSize":8,"topBannersInfo ...POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1 Host: xxx.xxx.xxx.xxx Content-Length: 39 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Content-Type ...Atlassian Confluence是一个专业的企业知识管理与协同软件，也可以用于构建企业wiki。. 。. 该软件可实现团队成员之间的协作和知识共享。. 一共复现5个漏洞：暴力破解、CVE-2015-8399任意文件读取、CVE-2021-26084远程代码执行、CVE-2021-26085受限的文件读取、CVE-2022-26134 OGNL ...See new Tweets. ConversationAtlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 . 部分 API请求 不需要登录即可访问获取信息，例如 /user/list ","renderedFileInfo":null,"shortPath":null,"tabSize":8,"topBannersInfo ...The following is a sample action entry for the doenterpagevariables action: In the above example, the doEnter() method of the com.atlassian.confluence.pages.actions.PageVariablesAction class handles requests to doenterpagevariables.action and will return values such as "success", "input";, or "error". ; 注意参数 node 中的 cu01 需要为shell集群中的存在主机 . 这里可以配合任意用户登录漏洞查看主机名 IP Abuse Reports for 45.146.164.50: . This IP address has been reported a total of 311 times from 73 distinct sources. 45.146.164.50 was first reported on May 16th 2021, and the most recent report was 1 year ago.一个综合漏洞知识库，集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库. Contribute to Threekiii/Vulnerability-Wiki development by creating an account on GitHub. Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 This IP address has been reported a total of 266 times from 25 distinct sources. 194.145.227.21 was first reported on February 16th 2021, and the most recent report was 3 months ago . Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.
Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 . Dkiz
Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 POST /casmain.xgi HTTP/1.1 Host: Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q ...IP Abuse Reports for 194.40.243.73: This IP address has been reported a total of 34 times from 5 distinct sources. 194.40.243.73 was first reported on December 9th 2020 , and the most recent report was 4 months ago . Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer ...Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 ; 注意参数 node 中的 cu01 需要为shell集群中的存在主机 . 这里可以配合任意用户登录漏洞查看主机名 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 Aug 10, 2022 · Atlassian Confluence是一个专业的企业知识管理与协同软件，也可以用于构建企业wiki。. 。. 该软件可实现团队成员之间的协作和知识共享。. 一共复现5个漏洞：暴力破解、CVE-2015-8399任意文件读取、CVE-2021-26084远程代码执行、CVE-2021-26085受限的文件读取、CVE-2022-26134 OGNL ... Looking over some of our honeypot logs today, I noticed one IP address, 60.223.74.99, scanning for several older Confluence vulnerabilities. Confluence is the collaboration component of Atlassian's suite of developer tools [1]. . 可以获取账号密码信息，一路点击右下角的继续将会跳转修改管理员账号密码页面，修改后登录即可获取后台权限 ","renderedFileInfo":null,"shortPath":null,"tabSize":8,"topBannersInfo":{"overridingGlobalFundingFile":false,"globalPreferredFundingPath":null,"repoOwner ...Access logs show anonymous hits on /pages/doenterpagevariables.action: confluence.example.com.au:443 103.27.186.177 - - [02/Sep/2021:11:54:44 +1000] "POST /pages/doenterpagevariables.action HTTP/1.1" 500 78835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" 195908 Atlassian Confluence doenterpagevariables.action 远程命令执行漏洞 CVE-2021-26084 Atlassian Confluence preview SSTI模版注入漏洞 CVE-2019-3396 AtlassianJira AtlassianJira Atlassian Jira ViewUserHover.jspa 用户信息泄露漏洞 CVE-2020-14181 Atlassian Jira cfx 任意文件读取漏洞 CVE-2021-26086 .