CVE-2020-4020

Published: 2020-06-01T07:15Z

Last Modified: 2024-11-21T05:32Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt