VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jun 3, 2020· Updated Jun 17, 2026

CVE-2020-4026

CVE-2020-4026

Description

The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before version 4.3.7, from version 5.0.0 before 5.0.1, and from version 5.1.0 before 5.1.1 allows remote attackers to enumerate all linked applications, including those that are restricted or otherwise hidden, through an incorrect authorization check.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Atlassian/Navigator Links3 versions
    cpe:2.3:a:atlassian:navigator_links:*:*:*:*:*:fisheye:*:*+ 2 more
    • cpe:2.3:a:atlassian:navigator_links:*:*:*:*:*:fisheye:*:*range: <3.3.23
    • (no CPE)range: <3.3.23, 4.0.0 to <4.3.7, 5.0.0 to <5.0.1, 5.1.0 to <5.1.1
    • (no CPE)range: unspecified
  • Atlassian/Fisheyev5
    Range: unspecified
  • Atlassian/Cruciblev5
    Range: unspecified

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.