CVE-2019-3398

CVE-2019-3398 is a critical path traversal vulnerability affecting Atlassian Confluence Server and Data Center versions 2.0.0 through 6.15.1. An authenticated attacker with permissions to add attachments or create spaces can exploit this flaw to write arbitrary files, leading to remote code execution. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low privileges and no user interaction, resulting in complete compromise of confidentiality, integrity, and availability. This CVE is actively exploited in the wild, listed in the KEV catalog, and has publicly available exploit code, including Metasploit modules and Nuclei templates, garnering significant community and media attention.