CVE-2017-18107

Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify add, modify and delete users & groups…

published December 17, 2019

CVSS
—
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify add, modify and delete users & groups via a Cross-site request forgery (CSRF) vulnerability. Please be aware that the Demo application is not enabled by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00449 · 38.0th percentile
Published
2019-12-17T03:45Z
EPSS history
Timeline
  • 17 DEC 03:45Z
    Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify add, modify and delete users & groups…
    cvelistv5