CVE-2019-20903

State: Published
Severity: Not scored
Published: Oct 1, 2020
Updated: Sep 17, 2024
Reserved: Jul 7, 2020

Description

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
@atlaskit/editor-coreAtlassian	before 113.1.5Affected

References

https://confluence.atlassian.com/pages/viewpage.action?pageId=1021244735
https://atlaskit.atlassian.com/packages/editor/editor-core/changelog/113.1.5
https://www.npmjs.com/package/%40atlaskit/editor-core

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.