description: Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link.
problem types: Cross Site Scripting (XSS)
affected:
{
product: Atlassian Application Links
vendor: Atlassian
versions:
lessThan: 5.4.4, status: affected, version: unspecified, versionType: custom
}