nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Crowd 2.11.1 - Apache Struts2 REST XStream Vulnerability

Hi,

Can you please verify if Crowd 2.11.1 version is affected by the Apache Struts2 REST XStream Vulnerability (CVE-2017-9805) ?

The REST plugin seems to be integrated into Crowd since 2.0.

Is Crowd using the REST plugin with XML?

If so will there be a patch for it?

Thanks,

Accepted answers

Boris Berenberg - Atlas Authority

Looks like nope: https://twitter.com/JIRA/status/905486179901906944

All comments

Boris Berenberg - Atlas Authority

Looks like nope: https://twitter.com/JIRA/status/905486179901906944

Thanks for the reply. It is great that Atlassian is so fast to respond to these issues. Helps us a lot.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

crowd