According to its self-reported version number, the Atlassian Crowd application running on the remote host is 2.1.x prior to 3.0.5, 3.1.x prior to 3.1.6, 3.2.x prior to 3.2.8, 3.3.x prior to 3.3.5 or 3.4.x prior to 3.4.4. It is, therefore, affected by a remote code execution (RCE) vulnerability. An unauthenticated, remote attacker can exploit this, by using pdkinstall development plugin, to install arbitrary plugins, which permits remote code execution.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Atlassian Crowd installed on the remote host is affected by a remote code execution (RCE) vulnerability.
An unauthenticated, remote attacker can exploit this, by using pdkinstall development plugin, to install arbitrary plugins, which permits remote code execution.

The version of Atlassian Crowd installed on the remote host is 2.1.x prior to 3.0.5, 3.1.x prior to 3.1.6, 3.2.x prior to 3.2.8, 3.3.x prior to 3.3.5 or 3.4.x prior to 3.4.4. It is, therefore, affected by a remote code execution (RCE) vulnerability. An unauthenticated, remote attacker can exploit this, by using pdkinstall development plugin, to install arbitrary plugins, which permits remote code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Atlassian Crowd installed on the remote host is 2.1.x prior to 3.0.5, 3.1.x prior to 3.1.6, 3.2.x prior to 3.2.8, 3.3.x prior to 3.3.5 or 3.4.x prior to 3.4.4. It is, therefore, affected by a remote code execution (RCE) vulnerability. An unauthenticated, remote attacker can exploit this, by using pdkinstall development plugin, to install arbitrary plugins, which permits remote code execution.

ID	Name	Product	Family	Published	Updated	Severity
98656	Atlassian Crowd 3.4.x < 3.4.4 RCE Vulnerability	Web App Scanning	Component Vulnerability	8/13/2019	3/14/2023	critical
98659	Atlassian Crowd 3.1.x < 3.1.6 RCE Vulnerability	Web App Scanning	Component Vulnerability	8/13/2019	3/14/2023	critical
98657	Atlassian Crowd 3.3.x < 3.3.5 RCE Vulnerability	Web App Scanning	Component Vulnerability	8/13/2019	3/14/2023	critical
98658	Atlassian Crowd 3.2.x < 3.2.8 RCE Vulnerability	Web App Scanning	Component Vulnerability	8/13/2019	3/14/2023	critical
98660	Atlassian Crowd 2.1.x < 3.0.5 RCE Vulnerability	Web App Scanning	Component Vulnerability	8/13/2019	3/14/2023	critical
138553	Atlassian Crowd 2.1.x < 3.0.5 / 3.1.x < 3.1.6 / 3.2.x < 3.2.8 / 3.3.x < 3.3.5 / 3.4.x < 3.4.4 RCE (direct check)	Nessus	CGI abuses	7/16/2020	5/14/2025	critical
125477	Atlassian Crowd 2.1.x < 3.0.5 / 3.1.x < 3.1.6 / 3.2.x < 3.2.8 / 3.3.x < 3.3.5 / 3.4.x < 3.4.4 RCE Vulnerability	Nessus	CGI abuses	5/28/2019	5/14/2025	critical
701078	Atlassian Crowd 2.1.x < 3.0.5 / 3.1.x < 3.1.6 / 3.2.x < 3.2.8 / 3.3.x < 3.3.5 / 3.4.x < 3.4.4 RCE	Nessus Network Monitor	CGI	7/22/2019	7/22/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical