CVE-2019-11580: Atlassian Crowd and Crowd Data Center Remote Code Execution
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability. Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
- CISA KEV-listed (remediation due 2022-05-03)
- used in ransomware campaigns
- EPSS 94.4% (100.0% percentile)