Remote Code Execution Vulnerability in Crowd Data Center and Server by Atlassian
CVE-2023-22521
Key Information:
- Vendor
- Atlassian
- Vendor
- CVE Published:
- 21 November 2023
Summary
A Remote Code Execution vulnerability was identified in Crowd Data Center and Server, specifically from version 3.4.6. An authenticated attacker can exploit this vulnerability to execute arbitrary code, jeopardizing the confidentiality, integrity, and availability of affected systems. This exploit does not require user interaction, which heightens its potential impact. Users are urged to upgrade to the latest version to mitigate this risk. Recommended fixed versions include Crowd Data Center and Server 3.4 upgrades from 5.1.6 or above, and for 5.2, upgrades from 5.2.1 or above. Detailed release notes and downloads are available on Atlassian’s official pages.
Affected Version(s)
Crowd Data Center >= 3.4.6 < 3.4.6
Crowd Data Center >= 5.2.0 >= 5.2.0
Crowd Server >= 3.4.6 < 3.4.6
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved