Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Products
See all
Community resources
Interests
See all
Community resources
Top groups
Explore all groups
Community resources
Deleted user
0 / 0 points
Next:
badges earned
Your Points Tracker
Challenges
Leaderboard
  • Global
  • Feed

Badge for your thoughts?

You're enrolled in our new beta rewards program. Join our group to get the inside scoop and share your feedback.

Join group
Recognition
Give the gift of kudos
You have 0 kudos available to give
Who do you want to recognize?
Why do you want to recognize them?
Kudos
Great job appreciating your peers!
Check back soon to give more kudos.
Past Kudos Given
No kudos given
You haven't given any kudos yet. Share the love above and you'll see it here.

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Sign up for free Log in
Atlassian Community Hero Image Collage

What version of Struts is in on Crowd 3.2

Edmon Uyan
Edmon Uyan Aug 23, 2018

There has been vulnerability that is raised for Apache Struts. As I recall, Struts is being used by Crowd. Wonder what version of Struts is in the latest Crowd 3.2?

 

Thank you.

Answer
Watch
Like Be the first to like this
374 views

1 answer

0 votes
Marcin Kempa
Marcin Kempa Atlassian Team Aug 24, 2018

Hi @Edmon Uyan

Thank you for reaching out to Atlassian Community!

We understand your concern regarding the new CVE-2018-11776 vulnerability announced On August 22, by the Apache Software Foundation

Our security team has investigated the case and we confirm that no Atlassian products are affected by this vulnerability, including Crowd 3.2 and all other Crowd versions that did not reach EOL.

However, as an extra precaution that is in-line with industry best practices we will be releasing new versions of Crowd 3.2.x and 3.1.x with updated version of Struts.

 

Hope that this answers your question.

Marcin Kempa

View More Comments
Rob Crowell
Rob Crowell Aug 27, 2018

Hey Marcin - you state "no Atlassian products" are affected. Just to be clear, does this also cover HipChat? We are running 2.2.4. Thank you. 

Like
Reply

Suggest an answer

Log in or Sign up to answer
Crowd
Crowd
TAGS
Community showcase
Nikki Zavadska _jexo_
Nikki Zavadska _jexo_
Published in Marketplace Apps & Integrations

☕️ Monday coffee with Jexo: Weekly Atlassian news roundup | 21st June 2021

Hi community 👋, as every Monday we're bringing you a quick update on what happened in the Atlassian ecosystem last week. There were a few interesting events like for example the announcement of th...

68 views 0 6
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you