$ cve CVE-2019-3398 JSON

CVE-2019-3398 KEV EXPLOIT

8.8

HIGH · CVSS 3.1 · EPSS 96.8% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-05-03.

Description

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center. All versions of Confluence Server from 2.0.0 before 6.6.13 (the fixed version for 6.6.x), from 6.7.0 before 6.12.4 (the fixed version for 6.12.x), from 6.13.0 before 6.13.4 (the fixed version for 6.13.x), from 6.14.0 before 6.14.3 (the fixed version for 6.14.x), and from 6.15.0 before 6.15.2 are affected by this vulnerability.

Scoring

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	96.84% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-22
On CISA KEV	yes — remediate by 2022-05-03
Public exploit	yes
Published	2019-04-18
Last modified	2026-06-17

CISA KEV

Name	Atlassian Confluence Server and Data Center Path Traversal Vulnerability
Added	2021-11-03
Due	2022-05-03
Vendor / product	Atlassian / Confluence Server and Data Center
Ransomware use	none reported

Affected (1)

Vendor	Product
atlassian	confluence server

Public exploits

Source	Title	Date
exploit-db	Atlassian Confluence 6.15.1 - Directory Traversal	2019-11-12

References

→ the Explorer · watch your stack · NVD