CVE-2018-5227

Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link.

• CWE-79

• http://www.securityfocus.com/bid/103731Third Party Advisory, VDB Entry
• https://ecosystem.atlassian.net/browse/APL-1361Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/103731Third Party Advisory, VDB Entry
• https://ecosystem.atlassian.net/browse/APL-1361Issue Tracking, Vendor Advisory

Published

Apr 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5220In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) al…
• CVE-2018-5221Multiple buffer overflows in BarCodeWiz BarCode before 6.7 A…
• CVE-2018-5223Fisheye and Crucible did not correctly check if a configured…
• CVE-2018-5224Bamboo did not correctly check if a configured Mercurial rep…
• CVE-2018-5225In browser editing in Atlassian Bitbucket Server from versio…
• CVE-2018-5226There was an argument injection vulnerability in Sourcetree …
• CVE-2018-5228The /browse/~raw resource in Atlassian Fisheye and Crucible …
• CVE-2018-5229The NotificationRepresentationFactoryImpl class in Atlassian…
• CVE-2018-5230The issue collector in Atlassian Jira before version 7.6.6, …
• CVE-2018-5231The ForgotLoginDetails resource in Atlassian Jira before ver…
• CVE-2018-5232The EditIssue.jspa resource in Atlassian Jira before version…
• CVE-2018-5233Cross-site scripting (XSS) vulnerability in system/src/Grav/…