CVE-2019-3398 Atlassian Confluence Server And Data Center
Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Atlassian Confluence Server and Data Center Path Traversal Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- not known