CVE-2019-11580
KEV · RansomwareAtlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
View CVE record →- Vendor / Project
- Atlassian
- Product
- Crowd and Crowd Data Center
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Known
- CWEs
- —
Description
Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
Required action
Apply updates per vendor instructions.