Re:Zero-Day Exploitation of Atlassian Confluence
by tyingq on Friday June 03, 2022 @03:48PM
(#31612813)
I would worry about just using that blocking pattern. They mention OGNL injection and ${ is just one pattern you can go after. There's also #{, %{, #var, and more.
[ Parent
| on HN ]
There are no comments on this comment yet.