The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5.3.4 and from version 5.4.0 before version 5.4.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the redirectUrl parameter link in the redirect warning message.

Related CVEs

CVE-2017-16860

Key Information

GHSA ID

GHSA-hggx-3mcq-v36x

Published

May 14, 2022 3:17 AM

Last Modified

May 14, 2022 3:17 AM

CVSS Score

5.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: June 15, 2025 6:20 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.