Known Vulnerabilities for Crowd by Atlassian
Listed below are 10 of the newest known vulnerabilities associated with "Crowd" by "Atlassian".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-31390 json | Cross-Site Request Forgery (CSRF) vulnerability in bdoga Social Crowd social-crowd allows Stored XSS.This issue affects Socia... | Not Provided | 2025-04-09 | 2026-04-23 |
| CVE-2023-22521 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2023-11-21 | 2023-11-29 |
| CVE-2022-43782 json | Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration... | 9.8 - CRITICAL | 2022-11-17 | 2023-11-07 |
| CVE-2022-26137 json | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters ... | 8.8 - HIGH | 2022-07-20 | 2022-08-04 |
| CVE-2022-26136 json | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by fi... | 9.8 - CRITICAL | 2022-07-20 | 2022-08-04 |
| CVE-2020-36240 json | The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthentica... | 5.3 - MEDIUM | 2021-03-01 | 2021-07-21 |
| CVE-2019-20902 json | Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before ver... | 7.5 - HIGH | 2020-10-01 | 2020-10-14 |
| CVE-2019-20104 json | The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote atta... | 7.5 - HIGH | 2020-02-06 | 2022-01-01 |
| CVE-2019-15005 json | The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate period... | 4.3 - MEDIUM | 2019-11-08 | 2019-11-14 |
| CVE-2019-11580 json | Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. Attackers ... | 9.8 - CRITICAL | 2019-06-03 | 2022-04-19 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Atlassian | Crowd | 4.2.3 | |||
| Application | Atlassian | Crowd | 4.2.2 | |||
| Application | Atlassian | Crowd | 4.2.1 | |||
| Application | Atlassian | Crowd | 4.2.0 | |||
| Application | Atlassian | Crowd | 4.1.9 | |||
| Application | Atlassian | Crowd | 4.1.8 | |||
| Application | Atlassian | Crowd | 4.1.7 | |||
| Application | Atlassian | Crowd | 4.1.6 | |||
| Application | Atlassian | Crowd | 4.1.5 | |||
| Application | Atlassian | Crowd | 4.1.4 | |||
| Application | Atlassian | Crowd | 4.1.3 | |||
| Application | Atlassian | Crowd | 4.1.2 | |||
| Application | Atlassian | Crowd | 4.1.1 | |||
| Application | Atlassian | Crowd | 4.1.0 | |||
| Application | Atlassian | Crowd | 4.0.5 | |||
| Application | Atlassian | Crowd | 4.0.4 | |||
| Application | Atlassian | Crowd | 4.0.3 | |||
| Application | Atlassian | Crowd | 4.0.2 | |||
| Application | Atlassian | Crowd | 4.0.1 | |||
| Application | Atlassian | Crowd | 4.0.0 |