exploit/multi/http/confluence_widget_connector

weaponized

Atlassian Confluence Widget Connector Macro Velocity Template Injection

view exploit source metasploittype exploitpublished 2019-03-25catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-3396US	critical9.8OT critical	99.9% (100th)	KEV	2019-03-25
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.