Atlassian Companion vulnerabilities
3 vulnerabilities
Known vulnerabilities in Atlassian Companion, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2023-22524atlassian · companion for mac +1 moreatlassian companion for macCertain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.CVSS9.8CriticalEPSS24.71%RoutineCVE-2020-4020atlassian · companion app +1 moreatlassian companion appThe file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure.CVSS7.2HighEPSS1.67%RoutineCVE-2020-4019atlassian · companion app +1 moreatlassian companion appThe file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability.CVSS7.8HighEPSS0.35%