.. / CVE-2019-3398

• RCE
• Nuclei
• Web

Exploit for Atlassian Confluence Download Attachments - Remote Code Execution (CVE-2019-3398)

Description:

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has ‘Admin’ permissions for a space can exploit this path traversal vulnerability to write files to arbitrary locations which can lead to remote code execution on systems that run a vulnerable version of Confluence Server or Data Center.

Nuclei Template

View the template here CVE-2019-3398.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-3398.yaml

References: