Mail.ru: RCE on shared.mail.ru due to "widget" plugin

🗓️ 29 Mar 2019 10:45:58Reported by chaosboltType

hackerone

hackerone🔗 hackerone.com👁 131 Views

RCE in widget plugin on shared.mail.r

Reporter	Title	Published	Views	Family All 65
Gitee	Exploit for Code Injection in Pivotal_Software Spring_Data_Commons	11 Apr 202111:34	–	gitee
Gitee	Exploit for Path Traversal in Atlassian Confluence_Server	27 Jul 202010:27	–	gitee
0day.today	Atlassian Confluence Widget Connector Macro Velocity Template Injection Exploit	18 Apr 201900:00	–	zdt
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	5 Feb 202116:31	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	10 Apr 201902:15	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	1 May 202102:10	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	16 Sep 202504:50	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202211:55	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	10 Apr 201902:22	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	1 Feb 202116:10	–	githubexploit

02 Dec 2019 15:22Current

1.5Low risk

Vulners AI Score1.5

EPSS0.94471

$10000

mail.ru rce widget plugin confluence cve-2019-3396 bugbounty