<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: atlassian-crowd</title><description>Every new CVE for atlassian-crowd.</description><link>https://agentprime.io/</link><item><title>CVE-2020-36240: Atlassian Crowd: The ResourceDownloadRewriteRule class in Crowd before version 4.0.4…</title><link>https://agentprime.io/advisories/CVE-2020-36240/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-36240/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Mar 2021 16:23:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-20902: Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP.</title><link>https://agentprime.io/advisories/CVE-2019-20902/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-20902/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Oct 2020 01:30:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-20104: Atlassian Crowd: The OpenID client application in Atlassian Crowd before version 3.6.2…</title><link>https://agentprime.io/advisories/CVE-2019-20104/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-20104/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Feb 2020 03:10:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-18107: Atlassian Crowd: Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1…</title><link>https://agentprime.io/advisories/CVE-2017-18107/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-18107/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 17 Dec 2019 03:45:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-15005: Atlassian Bitbucket Server: The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an…</title><link>https://agentprime.io/advisories/CVE-2019-15005/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-15005/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Nov 2019 03:55:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-11580: Atlassian Crowd: Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly…</title><link>https://agentprime.io/advisories/CVE-2019-11580/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-11580/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.95 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Jun 2019 13:43:48 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2017-18110: Atlassian Crowd: The administration backup restore resource in Atlassian Crowd before version 3.0.2 and…</title><link>https://agentprime.io/advisories/CVE-2017-18110/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-18110/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2019 14:04:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-18109: Atlassian Crowd: The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version…</title><link>https://agentprime.io/advisories/CVE-2017-18109/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-18109/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2019 14:04:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-18108: Atlassian Crowd: The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2…</title><link>https://agentprime.io/advisories/CVE-2017-18108/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-18108/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2019 14:04:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-18106: Atlassian Crowd: The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could…</title><link>https://agentprime.io/advisories/CVE-2017-18106/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-18106/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2019 14:04:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-18105: Atlassian Crowd: The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0…</title><link>https://agentprime.io/advisories/CVE-2017-18105/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-18105/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Mar 2019 14:04:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-20238: Atlassian Crowd: Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0…</title><link>https://agentprime.io/advisories/CVE-2018-20238/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-20238/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Feb 2019 18:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-16858: Incorrect authorization in Atlassian Crowd</title><link>https://agentprime.io/advisories/CVE-2017-16858/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-16858/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Jan 2018 14:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>