high7.2
CVE-2017-18108
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary…
Impact
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Crowd | before 2.10.2 |