Vulnerability Bulletins

CVE-2017-18108

   
Affected software ATLASSIAN
 
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2017-18108