Application Links
Atlassian · 7 CVEs
The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 bef…
Mar 17, 2020
The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are a…
Feb 12, 2020
The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.1…
Dec 17, 2019
Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from versio…
Apr 30, 2019
The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from…
Mar 29, 2019
The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version…
May 14, 2018
Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote atta…
Apr 10, 2018
The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.…
Apr 4, 2018
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2019-20105 | The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, from version 6.1.0 b… | MEDIUM | 1.49% | Mar 17, 2020 |
| CVE-2019-20100 | The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versions prior to 5.4.21, f… | MEDIUM | 1.02% | Feb 12, 2020 |
| CVE-2019-15011 | The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3… | MEDIUM | 0.92% | Dec 17, 2019 |
| CVE-2018-20239 | Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version… | MEDIUM | 3.34% | Apr 30, 2019 |
| CVE-2017-18111 | The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used… | HIGH | 1.63% | Mar 29, 2019 |
| CVE-2017-16860 | The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5.3.4 and from version 5.4.0 before vers… | MEDIUM | 0.89% | May 14, 2018 |
| CVE-2018-5227 | Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inje… | MEDIUM | 0.60% | Apr 10, 2018 |
| CVE-2017-18096 | The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers… | HIGH | 1.19% | Apr 4, 2018 |
Showing 1 to 7 of 7 CVEs