2944 matches found
CVE-2019-3398
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...
Atlassian Confluence Widget Connector Macro Velocity Template Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Atlassian Confluence Widget Connector Macro Velocity Template Injection", 'Description' = %q Widget Connector Macro is part of Atlassian Confluen...
CVE-2019-3398
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has ‘Admin’ permissions for a space can exploit this pat...
PT-2019-5256 · Atlassian · Confluence
Name of the Vulnerable Software and Affected Versions: Confluence Server versions 2.0.0 through 6.6.12 Confluence Server versions 6.7.0 through 6.12.3 Confluence Server versions 6.13.0 through 6.13.3 Confluence Server versions 6.14.0 through 6.14.2 Confluence Server versions 6.15.0 through 6.15.1...
Atlassian Confluence Widget Connector Macro Velocity Template Injection Exploit
Widget Connector Macro is part of Atlassian Confluence Server and Data Center that allows embed online videos, slideshows, photostreams and more directly into page. A template parameter can be used to inject remote Java code into a Velocity template, and gain code execution. Authentication is not...
Atlassian Confluence and Data Center Remote Code Execution (CVE-2019-3396)
A remote code execution vulnerability exists in the Widget Connector component of Atlassian Confluence and Data Center. A remote attacker can exploit this issue by sending a specially crafted packet to the target server. Successful exploitation could result in execution of arbitrary code on the...
Mail.ru: Path traversal, SSTI and RCE on a MailRu acquisition
Unpatched CVE-2019-3396 and few more in publicly accessible Atlassian Confluence instance in ESForce domain...
Atlassian Confluence Widget Connector Macro Velocity Template Injection
Widget Connector Macro is part of Atlassian Confluence Server and Data Center that allows embed online videos, slideshows, photostreams and more directly into page. A template parameter can be used to inject remote Java code into a Velocity template, and gain code execution. Authentication is...
Atlassian Confluence < 6.6.12 / 6.7.x < 6.12.3 / 6.13.x < 6.13.3 / 6.14.x < 6.14.2 Template Injection
According to the tests performed by Nessus, the remote host is affected by the following vulnerability: - A server-side template injection exists in the Widget Connector due to improper input validation. An attacker can exploit this, via unspecified vectors, to traverse directories or execute...
Exploit for Path Traversal in Atlassian Confluence_Server
CVE-2019-3396 Confluence 未授权 RCE CVE-2019-3396 漏洞...
Exploit for Path Traversal in Atlassian Confluence_Server
CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、put the...
Exploit for Path Traversal in Atlassian Confluence_Server
CVE-2019-3396 Confluence Widget Connector path traversal CVE-...
Confluence Server Remote Code Execution Vulnerability-vulnerability warning-the black bar safety net
Atlassian company for Confluence Server and Data Center products used in the widgetconnecter Assemblyversion Network Vine CRS/ARS products have full support for the vulnerability detection and verification, 网藤用户可直接登陆www.riskivy.com for verification. ! A, scope of impact Product Confluence Server...
Confluence - Path traversal vulnerability - CVE-2019-3398
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...
Confluence - Path traversal vulnerability - CVE-2019-3398
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...
Copying and pasting Status Macro (or TOC Macro) over https triggers mixed content and breaks certificate trust
h3. Issue Summary Copying and pasting a status macro or TOC over https in the browser will trigger mix content action, it will break the certificate trust on request of: Status macro plugins/servlet/status-macro/placeholder?title=titlehere&colour=Yellow TOC macro...
Copying and pasting Status Macro (or TOC Macro) over https triggers mixed content and breaks certificate trust
h3. Issue Summary Copying and pasting a status macro or TOC over https in the browser will trigger mix content action, it will break the certificate trust on request of: Status macro plugins/servlet/status-macro/placeholder?title=titlehere&colour=Yellow TOC macro...
Mail.ru: RCE on shared.mail.ru due to "widget" plugin
Confluence widget connector vulnerable to CVE-2019-3396 was available on shared.mail.ru...
Confluence File Disclosure
File disclosure vulnerability in Confluence widget connector macro Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Atlassian Confluence Server and Atlassian Data Center Server-Side Request Forgery Vulnerabilities
Atlassian Confluence Server and Atlassian Data Center are both products of Atlassian Australia.Atlassian Confluence Server is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. Atlassian Data Center is a data center system. A...