high7.8
CVE-2020-4019
The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place o…
Impact
The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Companion | before 1.0.0 |