Description
The CustomAppsRestResource list resource in Atlassian Navigator Links before version 3.3.23, from version 4.0.0 before version 4.3.7, from version 5.0.0 before 5.0.1, and from version 5.1.0 before 5.1.1 allows remote attackers to enumerate all linked applications, including those that are restricted or otherwise hidden, through an incorrect authorization check.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Atlassian Navigator Links
unspecified to < 3.2.23affected4.0.0 to < unspecifiedaffectedunspecified to < 4.3.7affected5.0.0 to < unspecifiedaffectedunspecified to < 5.0.1affected5.1.0 to < unspecifiedaffectedunspecified to < 5.1.1affected
Atlassian Crucible
unspecified to < 4.8.2affected
Atlassian Fisheye
unspecified to < 4.8.2affected