Vulnerability Bulletins |
CVE-2017-18109 |
|
| Affected software | ATLASSIAN |
| The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2017-18109 | |