CVE-2017-18108: Code Injection
Published Mar 29, 2019
·Updated
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection.
Affected Software
1 affected component
Atlassian crowd<2.10.2
Event History
Mar 29, 2019
CVE Published
via MITRE·02:04 PM
Data Sourced
via MITRE·02:04 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18108?
CVE-2017-18108 is a vulnerability in Atlassian Crowd before version 2.10.2 that allows remote attackers with administration rights to execute arbitrary code via a JNDI injection.
2
How does CVE-2017-18108 impact Atlassian Crowd?
CVE-2017-18108 allows attackers with admin rights to execute arbitrary code on affected Atlassian Crowd installations.
3
How severe is CVE-2017-18108?
CVE-2017-18108 has a severity rating of 7.2 (high).
4
How can I fix CVE-2017-18108?
To fix CVE-2017-18108, upgrade Atlassian Crowd to version 2.10.2 or later.
5
Where can I find more information about CVE-2017-18108?
More information about CVE-2017-18108 can be found at the following link: https://jira.atlassian.com/browse/CWD-5062