Remote Code Execution Flaw in Atlassian Crowd Administration SMTP Configuration

CVE-2017-18108

Summary

The Atlassian Crowd administration SMTP configuration is susceptible to a remote code execution vulnerability. This issue affects versions prior to 2.10.2, where an attacker with administrative rights can exploit JNDI injection vulnerabilities to execute arbitrary code. This security flaw emphasizes the crucial need for updating to the latest version and securing administration access to mitigate potential threats.

References