Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Confluence Widget Connector SSTI - Vulnerability Database

Confluence Widget Connector SSTI

Description

Widget Connector addon of Confluence is vulnerable to path traversal and server side template injection, which could be used for remote code execution.

Remediation

Upgrade to the latest version of Confluence

References

CVE-2019-3396
CONFSERVER-57974

Related Vulnerabilities

Server-Side Template Injection Critical
Common tags: Server Side Template Injection
Spring Boot Whitelabel Error Page SpEL High
Common tags: Server Side Template Injection
Jira SSTI CVE-2019-11581 High
Common tags: Server Side Template Injection
VMware Workspace ONE Access SSTI (CVE-2022-22954) High
Common tags: Server Side Template Injection
CrushFTP SSTI (CVE-2024-4040) Critical
Common tags: Server Side Template Injection

Severity

High

Classification

CVE-2019-3396
CWE-22
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Server Side Template Injection