Atlassian Crowd 3.x / 4.x < 4.4.4 / 5.x < 5.0.3 Security Bypass (CWD-5888)

Language:

Version 1.5 May 15, 2025, 5:17 AM Detection (remove script_exclude_keys for CGI scanning) Plugin Feed: 202505150517
Version 1.4 Jun 4, 2024, 7:00 PM Required Scan configuration ("Enable cgi scanning" set to "True") Plugin Feed: 202406041900
Version 1.3 Dec 2, 2022, 4:16 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202212021616
Version 1.2 Dec 2, 2022, 9:45 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202212020945
Version 1.1 Dec 1, 2022, 5:53 PM New Plugin Feed: 202212011753

* Changelogs are generally available for changes made after Nov 1, 2022