CVE-2019-3398
Atlassian Confluence Server and Data Center
Atlassian Confluence Server and Data Center Path Traversal Vulnerability
What it is
Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Atlassian entries on the list
- Multiple Products Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability CVE-2026-21589 · Oct 15, 2026
- Jira Server and Data Center Atlassian Jira Server and Data Center Path Traversal Vulnerability CVE-2021-26086 · Nov 12, 2024
- Confluence Data Center and Server Atlassian Confluence Data Center and Server Template Injection Vulnerability CVE-2023-22527 · Jan 24, 2024
- Confluence Data Center and Server Atlassian Confluence Data Center and Server Improper Authorization Vulnerability CVE-2023-22518 · Nov 7, 2023
- Confluence Data Center and Server Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CVE-2023-22515 · Oct 5, 2023
- Bitbucket Server and Data Center Atlassian Bitbucket Server and Data Center Command Injection Vulnerability CVE-2022-36804 · Sep 30, 2022