CVE-2019-3398: Atlassian Confluence Download Attachments - Remote Code Execution

No probes matching CVE-2019-3398 reached HoneyLabs sensors in the last 7 days. The vulnerability is rated high.

This CVE is on CISA's Known Exploited Vulnerabilities list, so the absence of traffic here reflects what our sensors saw in this window rather than the vulnerability being uninteresting.

Request paths we match on

• /pages/createpage.action
• /pages/downloadallattachments.action
• /plugins/drag-and-drop/upload.action?draftId=&filename=../../../../../../opt/atlassian/confluence/confluence/pages/.jsp&…

Activity is tracked continuously. The CVE tracker lists everything probed in the last 7 days.