Knowledge Hub

Atlassian, CVE-2022-26134

TryHackMe6 answered prompts

Atlassian, CVE-2022-26134 TryHackMe walkthrough with 6 answered prompts and lab methodology notes.

Prompts and answers

  • What is the full CVE entry for this exploit?
    CVE-2022-26134
  • **Answer format**: yay/nay
    yay
  • What does the acronym OGNL stand for?
    Object-Graph Navigation Language
  • Craft a payload to identify what user the application is running as. What is the user?
    confluence
  • If your command has spaces, either URL encode it, or use quotes around it.
    THM{OGNL_VULN}
  • ![222](https://assets.tryhackme.com/img/modules/web-vulnerabilities.png)
    *Check out our [Recent Threats module](https://tryhackme.com/module/recent-threats)*