CVE-2018-5227: Atlassian Application Links

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link.

Affected products

• Atlassian Application Links: before 5.4.4 (fixed in 5.4.4)

Published 2018-04-10. Last modified 2026-06-17.