Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
atlassian atlassian-gadgets vulnerabilities and exploits
(subscribe to this query)
356
VMScore
CVE-2020-36232
The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 prior to 4.3.14, from version 4.3.2.0 prior to 4.3.2.4, from version 4.4.0 prior to 4.4.12, and from version 5.0.0 prior to 5.0.1 allowed unexpected DNS lookups and requests to arbitra...
Atlassian Atlassian-gadgets
445
VMScore
CVE-2020-36287
The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous malicious users to obtain gadget related settings via a missing permissi...
Atlassian Data Center
Atlassian Jira
Atlassian Jira Server
Atlassian Jira Data Center
1 Github repository
445
VMScore
CVE-2020-14191
Affected versions of Atlassian Fisheye/Crucible allow remote malicious users to impact the application's availability via a Denial of Service (DoS) vulnerability in the MessageBundleResource within Atlassian Gadgets. The affected versions are before version 4.8.4.
Atlassian Crucible
Atlassian Fisheye
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2024-5274
CVE-2020-17519
CVE-2024-35340
CVE-2021-47558
local
XML injection
CVE-2021-47519
CVE-2021-47543
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started