The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning.
Max CVSS
9.8
EPSS Score
1.35%
Published
2016-12-09
Updated
2018-10-09
1 vulnerabilities found