Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70526
HistoryJan 23, 2020 - 1:36 a.m.

Improper Authorization in Applinks - CVE-2019-20105

2020-01-2301:36:12
security-metrics-bot
jira.atlassian.com
10

0.001 Low

EPSS

Percentile

38.7%

The Application links plugin used in Atlassian Jira Server and Data Center before version 7.13.12, from version 8.0.0 before version 8.5.4 and from version 8.6.0 before version 8.6.1 allows remote attackers with administrator privileges to edit existing applinks without passing WebSudo via an improper authorization check. See https://ecosystem.atlassian.net/browse/APL-1391 for more details.

0.001 Low

EPSS

Percentile

38.7%

Related for ATLASSIAN:JRASERVER-70526