Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root


1 badge earned


Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!


Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.


Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!


Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
Community Members
Community Events
Community Groups

What version of Struts is in on Crowd 3.2

There has been vulnerability that is raised for Apache Struts. As I recall, Struts is being used by Crowd. Wonder what version of Struts is in the latest Crowd 3.2?


Thank you.

1 answer

0 votes
Marcin Kempa Atlassian Team Aug 24, 2018

Hi @Edmon Uyan

Thank you for reaching out to Atlassian Community!

We understand your concern regarding the new CVE-2018-11776 vulnerability announced On August 22, by the Apache Software Foundation

Our security team has investigated the case and we confirm that no Atlassian products are affected by this vulnerability, including Crowd 3.2 and all other Crowd versions that did not reach EOL.

However, as an extra precaution that is in-line with industry best practices we will be releasing new versions of Crowd 3.2.x and 3.1.x with updated version of Struts.


Hope that this answers your question.

Marcin Kempa

Hey Marcin - you state "no Atlassian products" are affected. Just to be clear, does this also cover HipChat? We are running 2.2.4. Thank you. 

Suggest an answer

Log in or Sign up to answer

Atlassian Community Events