VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026

CVE-2018-5227

CVE-2018-5227

Description

Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link.

Affected products

3
  • Atlassian/Application Links3 versions
    cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:atlassian:application_links:*:*:*:*:*:*:*:*range: <5.4.4
    • (no CPE)range: <5.4.4
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.