CVE-2019-3396 — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability

CISA KEVExploited: confirmedAtlassian

Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.

Vulnerability details

Affected productsConfluence Server and Data Server
KEV remediation due2022-05-03