CVE-2017-18107

2019-12-1703:45:13

atlassian

www.cve.org

EPSS

0.001

Percentile

32.4%

JSON

Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify add, modify and delete users & groups via a Cross-site request forgery (CSRF) vulnerability. Please be aware that the Demo application is not enabled by default.

CNA Affected

[
  {
    "product": "Crowd",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "3.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

jira.atlassian.com/browse/CWD-5091

EPSS

0.001

Percentile

32.4%

JSON

Related for CVELIST:CVE-2017-18107