Mail.ru: Path traversal, SSTI and RCE on a MailRu acquisition

🗓️ 11 Apr 2019 20:10:37Reported by 0xc0ffeeType

hackerone

hackerone🔗 hackerone.com👁 602 Views

Unpatched CVE-2019-3396 in MailRu acquisition, Atlassian Confluence instance vulnerabilit

Reporter	Title	Published	Views	Family All 64
Gitee	Exploit for Code Injection in Pivotal_Software Spring_Data_Commons	11 Apr 202111:34	–	gitee
Gitee	Exploit for Path Traversal in Atlassian Confluence_Server	27 Jul 202010:27	–	gitee
0day.today	Atlassian Confluence Widget Connector Macro Velocity Template Injection Exploit	18 Apr 201900:00	–	zdt
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	5 Feb 202116:31	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	10 Apr 201902:15	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	1 May 202102:10	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	16 Sep 202504:50	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202211:55	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	10 Apr 201902:22	–	githubexploit
GithubExploit	Exploit for Path Traversal in Atlassian Confluence_Server	1 Feb 202116:10	–	githubexploit

08 Jul 2019 15:24Current

4.1Medium risk

Vulners AI Score4.1

EPSS0.94471

$2000

mailru path traversal ssti rce unpatched cve-2019-3396 atlassian confluence esforce bug bounty