[CWD-5071] Open redirect in the CrowdID login resource - CVE-2017-18109 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 3.0.2, 3.1.1
Affects Version/s: None
Component/s: None
Labels:

Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.

No work has yet been logged on this issue.

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 1 Start watching this issue

Created:: 08/Mar/2018 9:26 AM

Updated:: 27/Mar/2019 11:28 PM

Resolved:: 08/Mar/2018 10:19 AM

Details

Description

Attachments

Forms

Activity

[CWD-5071] Open redirect in the CrowdID login resource - CVE-2017-18109

People

Dates