by Kastro
Paper/Archive/CVE-2019-3396

CVE-2019-3396

Atlassian Confluence Server — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

KEV · due 3 Mayransomware useEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.

Affected

ProductAffectedFixed inSource
Confluence Serverunspecified – < 6.6.126.6.12CNA
Confluence Server6.7.0 – < unspecifiedunspecifiedCNA
Confluence Serverunspecified – < 6.12.36.12.3CNA
Confluence Servernext of 6.13.0 – < unspecifiedunspecifiedCNA
Confluence Serverunspecified – < 6.13.36.13.3CNA
Confluence Servernext of 6.14.0 – < unspecifiedunspecifiedCNA
Confluence Serverunspecified – < 6.14.26.14.2CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refjira.atlassian.com/browse/CONFSERVER-57974refpacketstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.htmlrefrapid7.com/db/modules/exploit/multi/http/confluence_widget_connectorexploitexploit-db.com/exploits/46731refpacketstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3396kevcisa.gov/known-exploited-vulnerabilities-catalog