Confluence

http://139.59.45.27:8090/admin/flag.tar.gz

Chall des & points

• confluence soln was very simple, it was a public CVE

link for exploit : https://github.com/kh4sh3i/CVE-2023-22515

detailed

• if u wanna try yourself :

Atlassian Confluence Broken Access Control Vulnerability (CVE-2023-22515) | Qualys Security BlogQualys Security Blog

Flag : YCTF{C0nf1u3nc3_x_YCF}