Crowd Server vulnerabilities

2 known vulnerabilities in Crowd Server from Atlassian. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Bamboo Server: Origin Validation Error

  CVE-2022-26137Jul 20, 2022AtlassianEPSS 2.41%

  A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has confirmed and fixed the only known security issue ass

• 9.8 Critical severity

  Bamboo Server: Improper Authentication

  CVE-2022-26136Jul 20, 2022AtlassianEPSS 5.66%

  A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability ca