CVE-2019-15011

—

CVSS 3.1

4.3 medium

EPSS

<1%p58

Published

Dec 17, 2019 (Dec 17, 2019)

Modified

Jun 17, 2026

Description

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check.

Vendors: atlassian
Products: application links
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.