Companion

companion

Vendor: Atlassian • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-22524 1Atlassian 1Companion Jun 17, 2026 Dec 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to all...Show more Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An attacker could utilize WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper to allow execution of code.Show less
CVE-2020-4020 1Atlassian 1Companion Jun 17, 2026 Jun 1, 2020 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe file...Show more The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure.Show less
CVE-2020-4019 1Atlassian 1Companion Jun 17, 2026 Jun 1, 2020 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability...Show more The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability.Show less