Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Products
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

Crowd 2.11.1 - Apache Struts2 REST XStream Vulnerability

Balaji Neyveli
Balaji Neyveli
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
Get involved
September 6, 2017

Hi,

 

Can you please verify if Crowd 2.11.1 version is affected by the  Apache Struts2 REST XStream Vulnerability (CVE-2017-9805)  ?

The REST plugin seems to be integrated into Crowd since 2.0.

Is Crowd using the REST plugin with XML? 

If so will there be a patch for it?

 

Thanks,

Answer
Watch
Like Be the first to like this
600 views

2 answers

1 accepted

2 votes
Answer accepted
Boris Berenberg - Atlas Authority
Boris Berenberg - Atlas Authority
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Get recognized
September 6, 2017

Looks like nope: https://twitter.com/JIRA/status/905486179901906944

Reply
0 votes
Balaji Neyveli
Balaji Neyveli
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
Get involved
September 6, 2017

Thanks for the reply. It is great that Atlassian is so fast to respond to these issues. Helps us a lot. 

Reply

Suggest an answer

Log in or Sign up to answer
Crowd
Crowd
TAGS
AUG Leaders

Atlassian Community Events

    See all events