Lucene search
Security-metrics-botATLASSIAN:CONFSERVER-59734HistoryApr 16, 2020 - 9:16 p.m.
Untrusted Search Path in Content - Edit Files / Companion - CVE-2020-4019
2020-04-1621:16:53
security-metrics-bot
jira.atlassian.com
13
0.001 Low
EPSS
Percentile
24.9%
The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app’s cmd.exe via a untrusted search path vulnerability.
h5. Acknowledgements
Credit for finding this vulnerability goes to Johannes Hatting (UFST).
| CPE | Name | Operator | Version |
|---|---|---|---|
| confluence server and data center | le | Companion-Legacy | |
| confluence server and data center | lt | Companion-1.0.0 |
Related
nvd
nvd
CVE-2020-4019
2020-06-01 07:15:11
cve
cve
CVE-2020-4019
2020-06-01 07:15:11
prion
prion
Design/Logic Flaw
2020-06-01 07:15:00
cvelist
cvelist
CVE-2020-4019
2020-04-21 00:00:00
atlassian
atlassian
Untrusted Search Path in Content - Edit Files / Companion - CVE-2020-4019
2020-04-16 21:16:53