Atlassian Companion App

• CVE-2020-4020 Unrated The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute 1.7%
• CVE-2020-4019 Unrated The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted searc 0.4%