← CVE Intelligence

CVE-2017-18109

Atlassian / Crowd PUBLISHED

Description (CNA)

The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.

Affected (CNA)

Vendor / productVersions
Atlassian / Crowdaffected unspecified before 3.0.2; affected 3.1.0 before unspecified; affected unspecified before 3.1.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.