Atlassian Confluence OGNL Remote Code Execution

This strike exploits an OGNL injection vulnerability in the createpage-entervariables resource of Confluence Server and Data Center. The vulnerability is due to improper validation of a parameter in a HTTP POST request. To exploit this vulnerability, a remote, unauthenticated attacker can submit a request with encoded single quote in order to perform an OGNL injection attack. A successful attack can result in arbitrary command execution in the context of the server process.