CVE-2019-20903: XSS
Published Oct 1, 2020
·Updated
The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.
Affected Software
1 affected component
Atlassian Editor-core Node.js<113.1.5
Event History
Oct 1, 2020
CVE Published
via MITRE·01:30 AM
Data Sourced
via MITRE·01:30 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-20903?
CVE-2019-20903 is rated as a medium severity vulnerability due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2019-20903?
To fix CVE-2019-20903, upgrade Atlassian editor-core to version 113.1.5 or later.
3
What type of vulnerability is CVE-2019-20903?
CVE-2019-20903 is a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject arbitrary HTML or JavaScript.
4
What are the affected versions for CVE-2019-20903?
Versions of Atlassian editor-core before 113.1.5 are affected by CVE-2019-20903.
5
Can CVE-2019-20903 affect my application?
Yes, if your application uses a version of Atlassian editor-core prior to 113.1.5, it is vulnerable to CVE-2019-20903.