CVE-2019-11580 — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

CISA KEVExploited: confirmedAtlassian

Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.

Vulnerability details

Affected productsCrowd and Crowd Data Center
KEV remediation due2022-05-03