Check method improvement

rapid7 · Dec 14, 2023 · c1459df · c1459df
1 parent a14b28e
commit c1459df
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/modules/exploits/multi/http/atlassian_confluence_unauth_backup.rb b/modules/exploits/multi/http/atlassian_confluence_unauth_backup.rb
@@ -67,12 +67,14 @@ def initialize(info = {})
 
   def check
     confluence_version = get_confluence_version
+    return Exploit::CheckCode::Unknown('Unable to determine the confluence version') unless confluence_version
 
     # Confluence Server and Confluence Data Center have the same vulnerable version ranges.
     if confluence_version.between?(Rex::Version.new('1.0.0'), Rex::Version.new('7.19.15')) ||
        confluence_version.between?(Rex::Version.new('7.20.0'), Rex::Version.new('8.3.3')) ||
        confluence_version.between?(Rex::Version.new('8.4.0'), Rex::Version.new('8.4.3')) ||
-       confluence_version.between?(Rex::Version.new('8.5.0'), Rex::Version.new('8.5.2'))
+       confluence_version.between?(Rex::Version.new('8.5.0'), Rex::Version.new('8.5.2')) ||
+       confluence_version == Rex::Version.new('8.6.0')
       return Exploit::CheckCode::Appears("Exploitable version of Confluence: #{confluence_version}")
     end