Description (CNA)
Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Atlassian / Atlassian Application Links | affected unspecified before 5.4.4 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.