CVE-2017-18109

The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to…

published March 29, 2019

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01131 · 66.1th percentile
Published
2019-03-29T14:04Z
EPSS history
Timeline
  • 29 MAR 14:04Z
    The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to…
    cvelistv5