-
Bug
-
Resolution: Fixed
-
Low
-
6.0.5
-
Severity 1 - Critical
-
The version of the Application Links plugin used in Bamboo before version 6.8.2 allows remote attackers to obtain information about configured application links via a missing permissions check. See https://ecosystem.atlassian.net/browse/APL-1386 for more details.
- is related to
-
CWD-5510 Information disclosure in the listEntityLinks servlet resource - CVE-2019-15011
- Closed
-
APL-1386 Loading...
- relates to
-
JRASERVER-70409 Information disclosure in the listEntityLinks servlet resource of the Application links plugin - CVE-2019-15011
- Closed