Vulnerabilities > Atlassian > Navigator Links > 5.1.0

DATE CVE VULNERABILITY TITLE RISK
2020-06-03 CVE-2020-4026 Incorrect Authorization vulnerability in Atlassian Navigator Links 4.0.0/5.0.0/5.1.0
The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before version 4.3.7, from version 5.0.0 before 5.0.1, and from version 5.1.0 before 5.1.1 allows remote attackers to enumerate all linked applications, including those that are restricted or otherwise hidden, through an incorrect authorization check.
network
low complexity
atlassian CWE-863
4.0