Atlassian

Application Links

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2019-20105

  • EPSS 0.2%
  • Veröffentlicht 17.03.2020 03:15:10
  • Zuletzt bearbeitet 21.11.2024 04:38:04

The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 before version 7.0.1, and from version 7.1.0 before...

4.3

CVE-2019-15011

  • EPSS 0.17%
  • Veröffentlicht 17.12.2019 04:15:11
  • Zuletzt bearbeitet 21.11.2024 04:27:52

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed applica...

5.4

CVE-2018-20239

  • EPSS 0.41%
  • Veröffentlicht 30.04.2019 16:29:00
  • Zuletzt bearbeitet 21.11.2024 04:01:08

Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cro...

8.7

CVE-2017-18111

  • EPSS 0.07%
  • Veröffentlicht 29.03.2019 14:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:22

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. ...

6.1

CVE-2017-16860

  • EPSS 0.23%
  • Veröffentlicht 14.05.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 03:17:07

The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5.3.4 and from version 5.4.0 before version 5.4.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site s...

4.8

CVE-2018-5227

  • EPSS 0.16%
  • Veröffentlicht 10.04.2018 13:29:00
  • Zuletzt bearbeitet 21.11.2024 04:08:22

Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the displ...

7.2

CVE-2017-18096

  • EPSS 0.07%
  • Veröffentlicht 04.04.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:21

The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers with administrative rights to access the content of internal network resources via a Serve...