Vulners
Lucene search
CVE-2019-3398
🗓️ 18 Apr 2019 17:21:37Reported by atlassianType 
cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1075 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 30 |
|---|---|---|---|---|
 | Confluence Server / Data Center Path Traversal Vulnerability | 24 Apr 201900:00 | – | zdt |
| Atlassian Confluence 6.15.1 - Directory Traversal Vulnerability | 12 Nov 201900:00 | – | zdt |
| Atlassian Confluence 6.15.1 - Directory Traversal Exploit | 12 Nov 201900:00 | – | zdt |
 | CVE-2019-3398 | 18 Apr 201900:00 | – | attackerkb |
 | Confluence - Path traversal vulnerability - CVE-2019-3398 | 31 Mar 201921:40 | – | atlassian |
| Confluence - Path traversal vulnerability - CVE-2019-3398 | 31 Mar 201921:40 | – | atlassian |
 | CVE-2019-3398 | 9 Dec 202007:18 | – | circl |
 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 3 Nov 202100:00 | – | cisa_kev |
 | Atlassian Confluence < 6.6.13 / 6.7.x < 6.12.4 / 6.13.x < 6.13.4 / 6.14.x < 6.14.3 / 6.15.x < 6.15.2 Directory Traversal Vulnerability | 25 Apr 201900:00 | – | nessus |
| Atlassian Confluence 6.15.x < 6.15.2 Directory Traversal Vulnerability | 17 Jul 201900:00 | – | nessus |
10
Node
OROROROR
[
{
"product": "Confluence",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "unspecified",
"status": "affected",
"version": "2.0.0",
"versionType": "custom"
},
{
"lessThan": "6.6.13",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "6.7.0",
"versionType": "custom"
},
{
"lessThan": "6.12.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "6.13.0",
"versionType": "custom"
},
{
"lessThan": "6.13.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "6.14.0",
"versionType": "custom"
},
{
"lessThan": "6.14.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "6.15.0",
"versionType": "custom"
},
{
"lessThan": "6.15.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| pageId | query param | /pages/downloadallattachments.action | Path traversal in download all attachments leading to arbitrary file writes | CWE-22 |
| filename | query param | /plugins/drag-and-drop/upload.action | Arbitrary file write via path traversal during shellcode upload by crafting the filename | CWE-22 |
| pageId | query param | /plugins/drag-and-drop/upload.action | Arbitrary file write via path traversal during shellcode upload by crafting the filename | CWE-22 |
| atl_token | query param | /plugins/drag-and-drop/upload.action | Arbitrary file write via path traversal during shellcode upload by crafting the filename | CWE-22 |
| name | query param | /plugins/drag-and-drop/upload.action | Arbitrary file write via path traversal during shellcode upload by crafting the filename | CWE-22 |
| size | query param | /plugins/drag-and-drop/upload.action | Arbitrary file write via path traversal during shellcode upload by crafting the filename | CWE-22 |
| mimeType | query param | /plugins/drag-and-drop/upload.action | Arbitrary file write via path traversal during shellcode upload by crafting the filename | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Oct 2025 13:39Current
8.8High risk
Vulners AI Score8.8
CVSS 3.18.8
CVSS 29
EPSS0.93854
SSVC