References https://nvd.nist.gov/vuln/detail/CVE-2019-3396 https://confluence.atlassian.com/doc/confluence-security-advisory-2019-03-20-966660264.html https://jira.atlassian.com/browse/CONFSERVER-57974 https://github.com/vulhub/vulhub/blob/master/confluence/CVE-2019-3396/README.md https://www.tenable.com/blog/cve-2019-3396-vulnerability-in-atlassian-confluence-widget-connector-exploited-in-the-wild https://www.acunetix.com/vulnerabilities/web/atlassian-confluence-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-cve-2019-3396/ https://www.rapid7.com/db/vulnerabilities/atlassian-confluence-cve-2019-3396/ https://medium.com/@knownsec404team/confluence-unauthorized-rce-vulnerability-cve-2019-3396-analysis-99715d2239f2 https://www.trendmicro.com/en_us/research/19/e/cve-2019-3396-redux-confluence-vulnerability-exploited-to-deliver-cryptocurrency-miner-with-rootkit.html https://www.exploit-db.com/exploits/49465 https://blog.reconinfosec.com/analysis-of-exploitation-of-cve-2019-3396 https://github.com/x-f1v3/CVE-2019-3396
Related VulnerabilitiesPoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path TraversalPoCCVE-2026-44177: Kirby CMS 5.3.0-5.4.0 - Path TraversalPoCCVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path TraversalPoCCVE-2026-54917: SeaweedFS <= 4.29 - Path Traversal File WritePoCCVE-2026-25895: FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File WritePoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCEPoCnodogsplash-lfi: Nodogsplash - Directory TraversalPoCCVE-2025-71324: Flowise - Path TraversalPoCCVE-2026-34908: UniFi OS - Authentication Bypass via Path Traversal (..%2f)PoCCVE-2026-53519: Nezha Dashboard < 2.0.13 - Path TraversalPoCCVE-2024-56511: DataEase < 2.10.4 - Authentication Bypass via Whitelist Path TraversalPoCCVE-2025-71334: Flowise - Path TraversalPoCCVE-2026-31831: Tautulli <= 2.16.1 - Path Traversal