Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:CONFSERVER-59612
HistoryMar 17, 2020 - 3:45 a.m.

Improper Authorization in Applinks - CVE-2019-20105

2020-03-1703:45:51
security-metrics-bot
jira.atlassian.com
89

0.001 Low

EPSS

Percentile

38.7%

The Application links plugin used in Atlassian Confluence Server and Data Center before version 6.13.11, and from version 6.14.0 before version 7.3.3 allows remote attackers with administrator privileges to edit existing applinks without passing WebSudo via an improper authorization check. See https://ecosystem.atlassian.net/browse/APL-1391 for more details.

0.001 Low

EPSS

Percentile

38.7%

Related for ATLASSIAN:CONFSERVER-59612