medium4.8
CVE-2018-5227
Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inje…
Impact
Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Application Links | before 5.4.4 |