Confluence

Challenge Description

Solution

  • On the landing page we could see login page which was for Confluence using version 8.5.1

  • Researching on it, we find a CVE for it CVE-2023-22515

  • Using this github POC , we get the credentials for the page.

  • Using those credentials and logging in the file gets downloaded

  • Unzipping it gives a flag.txt, which contains the flag

FLAG

YCTF{C0nf1u3nc3_x_YCF}

POC Links

Last updated