""ET WEB_SPECIFIC_APPS Atlassian Confluence CVE-2023-22515 Step 1/2 Success""
SID: 2048544
Revision: 1
Class Type: successful-admin
Metadata: affected_product Atlassian_Confluence, attack_target Web_Server, created_at 2023_10_12, cve CVE_2023_22515, deployment Perimeter, deployment Internal, deployment SSLDecrypt, performance_impact Low, confidence High, signature_severity Critical, updated_at 2023_10_12, reviewed_at 2023_10_12
Reference:
-
cve
-
2023-22515
Protocol: tcp
Source Network: [$HOME_NET,$HTTP_SERVERS]
Source Port: any
Destination Network: any
Destination Port: any
Flow: established,to_client
Contents:
-
Value: "200"
-
Value: "|3c 2f|div|3e 3c 21 2d 2d 20 5c 23|sidebar|2d|container|20 2d 2d 3e 0a 0a 20 20 20 20 20 20 20 20|success|0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f|main|3e 3c 21 2d 2d 20 5c 23|main|20 2d 2d 3e 0a|"
Within:
PCRE:
Special Options:
-
http_stat_code
-
file_data