CVE-2019-3398
KEVAtlassian Confluence Server and Data Center Path Traversal Vulnerability
View CVE record →- Vendor / Project
- Atlassian
- Product
- Confluence Server and Data Center
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-22
Description
Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.
Required action
Apply updates per vendor instructions.