CVE-2019-11580 — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability

Known ransomware use CISA KEV listed Added November 3, 2021 Remediate by May 3, 2022

Description

Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-11580

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer