PT-2019-2814 · Atlassian · Confluence

Daniil Dmitriev · Published 2019-02-28 · Updated 2025-10-24 · CVE-2019-3396

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Atlassian Confluence Server versions 6.6.0 through 6.6.11 Atlassian Confluence Server versions 6.7.0 through 6.12.2 Atlassian Confluence Server versions 6.13.0 through 6.13.2 Atlassian Confluence Server versions 6.14.0 through 6.14.1

Description The issue allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection. This is due to incorrect restriction of the directory path name with limited access. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For versions 6.6.0 through 6.6.11, update to version 6.6.12 or later. For versions 6.7.0 through 6.12.2, update to version 6.12.3 or later. For versions 6.13.0 through 6.13.2, update to version 6.13.3 or later. For versions 6.14.0 through 6.14.1, update to version 6.14.2 or later.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2019-02771

CVE-2019-3396

Affected Products

Confluence

References · 34

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/confluence_widget_connector.rb · Exploit
• 🔥 https://github.com/Yt1g3r/CVE-2019-3396_EXP · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-3396 · Exploit
• 🔥 https://github.com/pyn3rd/CVE-2019-3396 · Exploit
• 🔥 https://github.com/x-f1v3/CVE-2019-3396 · Exploit
• 🔥 https://github.com/PetrusViet/cve-2019-3396 · Exploit
• 🔥 https://github.com/0xNinjaCyclone/cve-2019-3396 · Exploit
• 🔥 https://github.com/abdallah-elsharif/cve-2019-3396 · Exploit
• 🔥 http://rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector · Exploit
• 🔥 https://exploit-db.com/exploits/46731 · Exploit
• 🔥 https://exploit-db.com/exploits/49465 · Exploit
• 🔥 http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html · Exploit
• https://jira.atlassian.com/browse/CONFSERVER-57974 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3396 · Security Note