> For the complete documentation index, see [llms.txt](https://heapbytes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security/confluence.md).

# Confluence

<figure><img src="/files/oHKKrHUcspqcUY1a91Hc" alt=""><figcaption><p>Chall des &#x26; points</p></figcaption></figure>

* confluence soln was very simple, it was a public CVE

## link for exploit : [https://github.com/kh4sh3i/CVE-2023-22515](<https://github.com/kh4sh3i/CVE-2023-22515&#xA;>)

## detailed&#x20;

* if u wanna try yourself :&#x20;

{% embed url="<https://blog.qualys.com/vulnerabilities-threat-research/2023/11/15/atlassian-confluence-broken-access-control-vulnerability-cve-2023-22515>" %}

## Flag : YCTF{C0nf1u3nc3\_x\_YCF}