Description
Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Crowd | Atlassian / Crowd | >= 2.1.0, < unspecified | affected |
| Crowd | Atlassian / Crowd | >= 3.1.0, < unspecified | affected |
| Crowd | Atlassian / Crowd | >= 3.2.0, < unspecified | affected |
| Crowd | Atlassian / Crowd | >= 3.3.0, < unspecified | affected |
| Crowd | Atlassian / Crowd | >= 3.4.0, < unspecified | affected |
| Crowd | Atlassian / Crowd | >= unspecified, < 3.4.4 | affected |
| Crowd | Atlassian / Crowd | >= unspecified, < 3.0.5 | affected |
| Crowd | Atlassian / Crowd | >= unspecified, < 3.1.6 | affected |
| Crowd | Atlassian / Crowd | >= unspecified, < 3.2.8 | affected |
| Crowd | Atlassian / Crowd | >= unspecified, < 3.3.5 | affected |