Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
atlassianDblackATLASSIAN:JRASERVER-68855
HistoryFeb 14, 2019 - 2:51 a.m.

XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239

2019-02-1402:51:49
dblack
jira.atlassian.com
23

0.002 Low

EPSS

Percentile

64.6%

JSON

The version of the Application Links plugin used in Jira before version 7.13.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. See https://ecosystem.atlassian.net/browse/APL-1373 for more details.

Related

prion 1
cvelist 1
atlassian 7
nessus 1
nvd 1
cve 1
prion
prion
Cross site scripting
2019-04-30 16:29:00
cvelist
cvelist
CVE-2018-20239
2019-04-29 00:00:00
atlassian
atlassian
XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239
2019-02-14 02:51:49
XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239
2019-04-30 02:30:30
XSS in the listApplicationLinks resource of the Application links plugin - CVE-2018-20239
2019-04-30 02:30:30
nessus
nessus
Atlassian JIRA < 7.13.3 / 8.x < 8.1 XSS vulnerability (JRASERVER-68855)
2020-01-09 00:00:00
nvd
nvd
CVE-2018-20239
2019-04-30 16:29:00
cve
cve
CVE-2018-20239
2019-04-30 16:29:00

0.002 Low

EPSS

Percentile

64.6%

JSON
Related for ATLASSIAN:JRASERVER-68855
prion1cvelist1atlassian7nessus1nvd1cve1