PT-2019-2814 · Atlassian · Confluence

Daniil Dmitriev · Publicado 2019-02-28 · Atualizado 2025-10-24 · CVE-2019-3396

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Atlassian Confluence Server versions 6.6.0 through 6.6.11 Atlassian Confluence Server versions 6.7.0 through 6.12.2 Atlassian Confluence Server versions 6.13.0 through 6.13.2 Atlassian Confluence Server versions 6.14.0 through 6.14.1

Description The issue allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection. This is due to incorrect restriction of the directory path name with limited access. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For versions 6.6.0 through 6.6.11, update to version 6.6.12 or later. For versions 6.7.0 through 6.12.2, update to version 6.12.3 or later. For versions 6.13.0 through 6.13.2, update to version 6.13.3 or later. For versions 6.14.0 through 6.14.1, update to version 6.14.2 or later.

Exploit

Correção

RCE

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2019-02771

CVE-2019-3396

Produtos afetados

Confluence

Referências · 34

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/confluence_widget_connector.rb · Exploit
• 🔥 https://github.com/Yt1g3r/CVE-2019-3396_EXP · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-3396 · Exploit
• 🔥 https://github.com/pyn3rd/CVE-2019-3396 · Exploit
• 🔥 https://github.com/x-f1v3/CVE-2019-3396 · Exploit
• 🔥 https://github.com/PetrusViet/cve-2019-3396 · Exploit
• 🔥 https://github.com/0xNinjaCyclone/cve-2019-3396 · Exploit
• 🔥 https://github.com/abdallah-elsharif/cve-2019-3396 · Exploit
• 🔥 http://rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector · Exploit
• 🔥 https://exploit-db.com/exploits/46731 · Exploit
• 🔥 https://exploit-db.com/exploits/49465 · Exploit
• 🔥 http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html · Exploit
• https://habr.com/ru/company/pt/blog/447904 · Nota
• https://jira.atlassian.com/browse/CONFSERVER-57974 · Aviso do Fabricante