OGNL injection

Confluence CVE-2022-26134: OGNL Injection RCE Under Fire

Post author:Hmmnm
Post published:June 4, 2022
Post category:Cloud & Infrastructure Security Web & API Security

Exploited in the wild two days before the patch existed. How OGNL injection turned Confluence into June 2022's internet-scale fire drill — and the playbook it left behind.