CVE-2020-18683

CRITICAL 9.8CVE-2020-18683 · Published 30/09/2021 · updated 17/06/2026

In short

CVE-2020-18683 is a CRITICAL (CVSS 9.8) vulnerability affecting floodlight (atlassian).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
floodlight atlassian	`≤ 1.2`	No fix yet

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.