All 12 CVE vulnerabilities found in Crowd, with AI-generated Chinese analysis, references, and POCs.
This page documents security vulnerabilities associated with the Crowd product developed by the vendor Atlassian, focusing on common weakness types such as injection flaws and cross-site scripting. It aggregates reported security issues affecting various iterations of the Crowd software suite, covering vulnerabilities disclosed and tracked within the current and preceding years. Visitors to this resource can track specific vendor advisories to stay informed about critical patches and workarounds recommended by Atlassian for security teams. Users can also deepen their understanding of specific weakness classes by analyzing patterns in how these flaws manifest within the Crowd environment. Additionally, administrators can look up the comprehensive vulnerability history of their deployed products to assess exposure and prioritize remediation efforts based on historical data. The information presented here serves as a centralized reference point for security professionals managing Atlassian Crowd instances, enabling them to correlate internal systems with external threat intelligence. By consolidating these records, the page facilitates better risk management and ensures that security teams have access to timely, accurate data regarding known defects. This approach supports proactive security hygiene and helps organizations maintain the integrity of their identity management infrastructure by addressing weaknesses before they can be exploited by malicious actors seeking unauthorized access or data exfiltration opportunities.
Vendor: Atlassian
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2020-36240 | Crowd 安全漏洞 | 5.3 | - | 2021-03-01 |
| CVE-2019-20902 | OpenLDAP 安全漏洞 | 6.5 | - | 2020-10-01 |
| CVE-2019-20104 | Atlassian Crowd 安全漏洞 | 7.5 | - | 2020-02-06 |
| CVE-2017-18107 | Atlassian Crowd 跨站请求伪造漏洞 | 6.5 | - | 2019-12-17 |
| CVE-2019-11580 | Atlassian Crowd和Atlassian Crowd Data Center 输入验证错误漏洞 | 9.8 | - | 2019-06-03 |
| CVE-2017-18105 | Atlassian Crowd 授权问题漏洞 | 7.4 | - | 2019-03-29 |
| CVE-2017-18106 | Atlassian Crowd 授权问题漏洞 | 7.5 | - | 2019-03-29 |
| CVE-2017-18108 | Atlassian Crowd 代码注入漏洞 | 7.2 | - | 2019-03-29 |
| CVE-2017-18109 | Atlassian Crowd 输入验证错误漏洞 | 6.1 | - | 2019-03-29 |
| CVE-2017-18110 | Atlassian Crowd 代码问题漏洞 | 7.7 | - | 2019-03-29 |
| CVE-2018-20238 | Atlassian Crowd 设计错误漏洞 | 8.1 | - | 2019-02-13 |
| CVE-2017-16858 | Atlassian Crowd crowd-application插件模块安全漏洞 CWE-863 | 6.8 | - | 2018-01-31 |
All 12 known CVE vulnerabilities affecting Crowd with full Chinese analysis, references, and POCs where available.