Live › vulnerability › CVE-2019-3396
Go to dashboardAtlassian Confluence Server and Data Center has a server-side template injection flaw in its Widget Connector macro that lets an attacker traverse paths and run code on the server. CISA lists it as actively exploited in the wild, and it has been tied to ransomware campaigns.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Atlassian Confluence Server and Data Server | vendor | – | – |
Check the installed Confluence version under Administration > System Information or the footer of the admin pages; compare against the fixed release in the Atlassian advisory.
Upgrade Confluence Server or Data Center to a fixed version per Atlassian's security advisory for CVE-2019-3396.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.
This page as .md · .json · in your agent: get_signal("CVE-2019-3396")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.