Atlassian Application Links
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-20105 | unspecified – < 5.4.20 ; 6.0.0 – < unspecified ; unspecified – < 6.0.12 ; … | The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, f | MEDIUM 4.9 | 1.5 % | ||
| CVE-2019-20100 | unspecified – < 5.4.21 ; 6.0.0 – < unspecified ; unspecified – < 6.0.12 ; … | The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versions | MEDIUM 4.7 | 1.0 % | ||
| CVE-2019-15011 | unspecified – < 5.0.12 ; 5.1.0 – < unspecified ; unspecified – < 5.2.11 ; … | The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 | MEDIUM 4.3 | 0.9 % | ||
| CVE-2017-18111 | unspecified – < 5.0.10 ; 5.1.0 – < unspecified ; unspecified – < 5.1.3 ; … | The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before | HIGH 8.7 | 1.6 % | ||
| CVE-2017-16860 | unspecified – < 5.2.7 ; 5.3.0 – < unspecified ; unspecified – < 5.3.4 ; … | The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5.3.4 and from versio | MEDIUM 6.1 | 0.9 % |