CVE-2020-36232

The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it...

CVE-2020-36232

The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it...

PT-2021-11969

Name of the Vulnerable Software and Affected Versions: atlassian-gadgets versions 4.2.37 and earlier atlassian-gadgets versions 4.3.0 through 4.3.13 atlassian-gadgets versions 4.3.2.0 through 4.3.2.3 atlassian-gadgets versions 4.4.0 through 4.4.11 atlassian-gadgets versions 5.0.0 Description: The...

CVE-2020-36232: Server-Side Request Forgery (SSRF)

The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it...