Lucene search
DblackATLASSIAN:CONFSERVER-58208HistoryApr 30, 2019 - 2:30 a.m.
XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239
2019-04-3002:30:30
dblack
jira.atlassian.com
33
0.002 Low
EPSS
Percentile
64.6%
The version of the Application Links plugin used in Confluence before version 6.15.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. See https://ecosystem.atlassian.net/browse/APL-1373 for more details.
| CPE | Name | Operator | Version |
|---|---|---|---|
| confluence server and data center | lt | 6.15.2 | |
| confluence server and data center | le | 6.13.2 |
Related
prion
prion
Cross site scripting
2019-04-30 16:29:00
cvelist
cvelist
CVE-2018-20239
2019-04-29 00:00:00
atlassian
atlassian
nessus
nessus
Atlassian JIRA < 7.13.3 / 8.x < 8.1 XSS vulnerability (JRASERVER-68855)
2020-01-09 00:00:00
nvd
nvd
CVE-2018-20239
2019-04-30 16:29:00
cve
cve
CVE-2018-20239
2019-04-30 16:29:00