CVE-2020-4019

—

CVSS 3.1

7.8 high

EPSS

<1%p29

Published

Jun 1, 2020 (Jun 1, 2020)

Modified

Jun 17, 2026

Description

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability.

Vendors: atlassian
Products: companion
Weakness: CWE-426
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.