coldbraid

CVE-2019-11580 Atlassian Crowd And Crowd Data Center

Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.

CVSS
not scored

On CISA’s exploited list

Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
known