Medium severity · published Apr 30, 2019
CVE-2018-20239
Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4…
5.4
CVSS
3.3%
EPSS
No
On KEV
Description
Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. The product is used as a plugin in various Atlassian products where the following are affected: Confluence before version 6.15.2, Crucible before version 4.7.0, Crowd before version 3.4.3, Fisheye before version 4.7.0, Jira before version 7.13.3 and 8.x before 8.1.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Confluence · Atlassian
before 6.15.2 · source: NVD
JI
Jira · Atlassian
before 7.13.3; 8.0.0 before 8.1.0 · source: NVD
AL
Application Links · Atlassian
before 5.0.11; 5.1.0 before 5.2.10; 5.3.0 before 5.3.6; 5.4.0 before 5.4.12; 6.0.0 before 6.0.4 · source: NVD
CR
Crowd · Atlassian
before 3.4.3 · source: NVD
CR
Crucible · Atlassian
before 4.7.0 · source: NVD
FI
Fisheye · Atlassian
before 4.7.0 · source: NVD
JD
Jira Data Center · Atlassian
before 7.13.3; 8.0.0 before 8.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-20239
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-20239
Issue Tracking
https://ecosystem.atlassian.net/browse/APL-1373
Issue Tracking
https://jira.atlassian.com/browse/CONFSERVER-58208
Issue Tracking
https://jira.atlassian.com/browse/CRUC-8379
Issue Tracking
https://jira.atlassian.com/browse/CWD-5362
Issue Tracking
https://jira.atlassian.com/browse/FE-7161
Issue Tracking
https://jira.atlassian.com/browse/JRASERVER-68855
More from Confluence
9.8
CVE-2023-22527
Atlassian Confluence Data Center and Server Template Injection Vulnerability
9.8
CVE-2023-22518
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
9.8
CVE-2023-22515
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
9.8
CVE-2022-26138
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
9.8
CVE-2022-26134
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability