Zero-Day Exploitation of Atlassian Confluence

Re:Zero-Day Exploitation of Atlassian Confluence by Icingdeath on Friday June 03, 2022 @05:16AM (#31605980)

Using nginx in front of my local confluence server (not listening on the internet) and used the following:

  location ~\* \$\{. {
          deny all;
  }

but this only helps if this vulnerability is triggered using the request uri otherwise it's useless

[ Parent | on HN ]

Re:Zero-Day Exploitation of Atlassian Confluence by bombcar on Friday June 03, 2022 @09:31AM (#31607991)

Anyone know how you'd quote it for Apache rewrite?

        RewriteEngine On
        RewriteCond %{REQUEST_URI} ^.*\${.*$
        RewriteRule ^/(.*) https://google.com [R=302,L]

seems to work ...

[ Parent | on HN ]