Confluence Server and Data Server

Nov 3, 2021high

CVE-2019-3396: Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution. Required action: Apply updates per vendor instructions.

CVE-2019-3396EPSS 99.9%AtlassianConfluence Server and Data Server

CISA KEV ↗ · unattributed attribution