Security Advisory

CVE-2020-4020

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-01 06:35:33
Last updated 2024-09-16 17:29:09
Assigner atlassian
State PUBLISHED

Description

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure.