Update GobyVuls-Document.md

This commit is contained in:
Goby authored and GitHub committed 2024-01-23 17:09:37 +08:00
1 parent 360451c7a8
commit 850ae68a0e
1 file changed
+14 -1
+14 -1
View File
@@ -1,7 +1,20 @@
# Goby History Update Vulnerability Total Document (Continuously Update)
The following content is an updated vulnerability from Goby. Some of the vulnerabilities are recorded on the screen for easy viewing.
**Updated document date: January 18, 2024**
**Updated document date: January 23, 2024**
## Atlassian Confluence template/aui/text-inline.vm code execution vulnerability (CVE-2023-22527)
| **Vulnerability** | Atlassian Confluence template/aui/text-inline.vm code execution vulnerability (CVE-2023-22527) |
| :----: | :-----|
| **Chinese name** | Atlassian Confluence template/aui/text-inline.vm 代码执行漏洞(CVE-2023-22527) |
| **CVSS core** | 10 |
| **FOFA Query** (click to view the results directly)| [ app="ATLASSIAN-Confluence"](https://en.fofa.info/result?qbase64=aGVhZGVyPSJYLUNvbmZsdWVuY2UtIiB8fCBiYW5uZXI9IlgtQ29uZmx1ZW5jZS0iIHx8IChib2R5PSJuYW1lPVwiY29uZmx1ZW5jZS1iYXNlLXVybFwiIiAmJiBib2R5PSJpZD1cImNvbS1hdGxhc3NpYW4tY29uZmx1ZW5jZSIpIHx8IHRpdGxlPSJBdGxhc3NpYW4gQ29uZmx1ZW5jZSIgfHwgKHRpdGxlPT0iRXJyb3JzIiAmJiBib2R5PSJDb25mbHVlbmNlIik%3D)|
| **Number of assets affected** | 1190821 |
| **Description** | Atlassian Confluence is an enterprise team collaboration and knowledge management software developed by Atlassian that provides a centralized platform for creating, organizing and sharing your team's documents, knowledge base, project plans and collaborative content.Atlassian Confluence has a remote code execution vulnerability in template/aui/text-inline.vm that could allow an unauthorized attacker to execute arbitrary code on an affected version. |
| **Impact** | Atlassian Confluence has a remote code execution vulnerability in template/aui/text-inline.vm that could allow an unauthorized attacker to execute arbitrary code on an affected version. |
![](https://s3.bmp.ovh/imgs/2024/01/23/1888fed69ab36f7a.gif)
## Ivanti Connect Secure and Policy Secure keys-status remote command execution vulnerability (CVE-2023-46805/CVE-2024-21887)