CVE-2019-3396

Summary

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.

Affected Software

Weaknesses

• Server-Side Template Injection

ADP Enrichment

CVE Program Container

Additional References

• https://jira.atlassian.com/browse/CONFSERVER-57974
• http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html
• http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector
• https://www.exploit-db.com/exploits/46731/
• http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3396

References

• https://jira.atlassian.com/browse/CONFSERVER-57974
• http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html
• http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector
• https://www.exploit-db.com/exploits/46731/
• http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html

• ←Previous
• Next→