{"history":[{"alert":0,"cve":"CVE-2019-3396","id":21878,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.99913, \"percentile\": 0.99968}"},{"alert":0,"cve":"CVE-2019-3396","id":19495,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.99913, \"percentile\": 0.99967}"},{"alert":0,"cve":"CVE-2019-3396","id":17461,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.99913, \"percentile\": 0.99967}"},{"alert":0,"cve":"CVE-2019-3396","id":15525,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.99913, \"percentile\": 0.99967}"},{"alert":0,"cve":"CVE-2019-3396","id":13503,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.99913, \"percentile\": 0.99968}"},{"alert":0,"cve":"CVE-2019-3396","id":11285,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.99913, \"percentile\": 0.99968}"},{"alert":1,"cve":"CVE-2019-3396","id":10656,"kind":"cna","observed_at":1793960400,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-04T19:12:09.544Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://jira.atlassian.com/browse/CONFSERVER-57974\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector\"}, {\"name\": \"46731\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/46731/\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2019-3396\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-07T12:25:45.543931Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3396\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-22\", \"description\": \"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:45:41.385Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3396\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2021-11-03T00:00:00.000Z\", \"value\": \"CVE-2019-3396 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Confluence Server\", \"vendor\": \"Atlassian\", \"versions\": [{\"lessThan\": \"6.6.12\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}, {\"lessThan\": \"unspecified\", \"status\": \"affected\", \"version\": \"6.7.0\", \"versionType\": \"custom\"}, {\"lessThan\": \"6.12.3\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}, {\"lessThan\": \"unspecified\", \"status\": \"affected\", \"version\": \"next of 6.13.0\", \"versionType\": \"custom\"}, {\"lessThan\": \"6.13.3\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}, {\"lessThan\": \"unspecified\", \"status\": \"affected\", \"version\": \"next of 6.14.0\", \"versionType\": \"custom\"}, {\"lessThan\": \"6.14.2\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}], \"datePublic\": \"2019-03-20T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Server-Side Template Injection\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2021-01-22T16:06:08.000Z\", \"orgId\": \"f08a6ab8-ed46-4c22-8884-d911ccfe3c66\", \"shortName\": \"atlassian\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://jira.atlassian.com/browse/CONFSERVER-57974\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector\"}, {\"name\": \"46731\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/46731/\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"security@atlassian.com\", \"DATE_PUBLIC\": \"2019-03-20T10:00:00\", \"ID\": \"CVE-2019-3396\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Confluence Server\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"6.6.12\"}, {\"version_affected\": \">=\", \"version_value\": \"6.7.0\"}, {\"version_affected\": \"<\", \"version_value\": \"6.12.3\"}, {\"version_affected\": \">\", \"version_value\": \"6.13.0\"}, {\"version_affected\": \"<\", \"version_value\": \"6.13.3\"}, {\"version_affected\": \">\", \"version_value\": \"6.14.0\"}, {\"version_affected\": \"<\", \"version_value\": \"6.14.2\"}]}}]}, \"vendor_name\": \"Atlassian\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Server-Side Template Injection\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"https://jira.atlassian.com/browse/CONFSERVER-57974\", \"refsource\": \"MISC\", \"url\": \"https://jira.atlassian.com/browse/CONFSERVER-57974\"}, {\"name\": \"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html\"}, {\"name\": \"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector\", \"refsource\": \"MISC\", \"url\": \"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector\"}, {\"name\": \"46731\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/46731/\"}, {\"name\": \"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html\", \"refsource\": \"MISC\", \"url\": \"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"f08a6ab8-ed46-4c22-8884-d911ccfe3c66\", \"assignerShortName\": \"atlassian\", \"cveId\": \"CVE-2019-3396\", \"datePublished\": \"2019-03-25T18:37:06.256Z\", \"dateReserved\": \"2018-12-19T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:45:41.385Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2019-3396","id":9031,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.99913, \"percentile\": 0.99968}"},{"alert":0,"cve":"CVE-2019-3396","id":6819,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.99913, \"percentile\": 0.99967}"},{"alert":0,"cve":"CVE-2019-3396","id":4596,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.99913, \"percentile\": 0.99967}"},{"alert":0,"cve":"CVE-2019-3396","id":2378,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.99913, \"percentile\": 0.99967}"},{"alert":1,"cve":"CVE-2019-3396","id":1532,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2019-3396\", \"cwes\": [\"CWE-22\"], \"dateAdded\": \"2021-11-03\", \"dueDate\": \"2022-05-03\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2019-3396\", \"product\": \"Confluence Server and Data Server\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.\", \"vendorProject\": \"Atlassian\", \"vulnerabilityName\": \"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability\"}"}],"record":{"affected":[{"product":"Confluence Server","vendor":"Atlassian","versions":[{"lessThan":"6.6.12","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"6.7.0","versionType":"custom"},{"lessThan":"6.12.3","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"next of 6.13.0","versionType":"custom"},{"lessThan":"6.13.3","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"next of 6.14.0","versionType":"custom"},{"lessThan":"6.14.2","status":"affected","version":"unspecified","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T19:12:09.544Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://jira.atlassian.com/browse/CONFSERVER-57974"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector"},{"name":"46731","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/46731/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2019-3396","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-07T12:25:45.543931Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2021-11-03","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3396"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:45:41.385Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3396"}],"timeline":[{"lang":"en","time":"2021-11-03T00:00:00.000Z","value":"CVE-2019-3396 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Confluence Server","vendor":"Atlassian","versions":[{"lessThan":"6.6.12","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"6.7.0","versionType":"custom"},{"lessThan":"6.12.3","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"next of 6.13.0","versionType":"custom"},{"lessThan":"6.13.3","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"unspecified","status":"affected","version":"next of 6.14.0","versionType":"custom"},{"lessThan":"6.14.2","status":"affected","version":"unspecified","versionType":"custom"}]}],"datePublic":"2019-03-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection."}],"problemTypes":[{"descriptions":[{"description":"Server-Side Template Injection","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-01-22T16:06:08.000Z","orgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66","shortName":"atlassian"},"references":[{"tags":["x_refsource_MISC"],"url":"https://jira.atlassian.com/browse/CONFSERVER-57974"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html"},{"tags":["x_refsource_MISC"],"url":"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector"},{"name":"46731","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/46731/"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@atlassian.com","DATE_PUBLIC":"2019-03-20T10:00:00","ID":"CVE-2019-3396","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Confluence Server","version":{"version_data":[{"version_affected":"<","version_value":"6.6.12"},{"version_affected":">=","version_value":"6.7.0"},{"version_affected":"<","version_value":"6.12.3"},{"version_affected":">","version_value":"6.13.0"},{"version_affected":"<","version_value":"6.13.3"},{"version_affected":">","version_value":"6.14.0"},{"version_affected":"<","version_value":"6.14.2"}]}}]},"vendor_name":"Atlassian"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Server-Side Template Injection"}]}]},"references":{"reference_data":[{"name":"https://jira.atlassian.com/browse/CONFSERVER-57974","refsource":"MISC","url":"https://jira.atlassian.com/browse/CONFSERVER-57974"},{"name":"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html"},{"name":"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector","refsource":"MISC","url":"http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector"},{"name":"46731","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/46731/"},{"name":"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html"}]}}}},"cveMetadata":{"assignerOrgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66","assignerShortName":"atlassian","cveId":"CVE-2019-3396","datePublished":"2019-03-25T18:37:06.256Z","dateReserved":"2018-12-19T00:00:00.000Z","dateUpdated":"2025-10-21T23:45:41.385Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1793960400,"cve":"CVE-2019-3396","description":"The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.","epss":{"date":"2026-11-12","epss":0.99913,"percentile":0.99968},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2019-3396","cwes":["CWE-22"],"dateAdded":"2021-11-03","dueDate":"2022-05-03","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-3396","product":"Confluence Server and Data Server","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.","vendorProject":"Atlassian","vulnerabilityName":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability"},"kev_checked":1794522003,"products":"Atlassian Confluence Server","references":["https://jira.atlassian.com/browse/CONFSERVER-57974","http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html","http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector","https://www.exploit-db.com/exploits/46731/","http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-3396"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}