Uploaded image for project: 'Crowd'
  1. Crowd
  2. CWD-5901

List of security vulnerabilities addressed in atlassian/log4j1

    XMLWordPrintable

Details

    • Suggestion
    • Status: Gathering Interest (View Workflow)
    • Resolution: Unresolved
    • None
    • Documentation
    • None

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      Crowd uses the same Atlassian-maintained fork of Log4j 1.2.17 libraries as Jira and Confluence. This means a number of CVEs that's detailed in the Jira Documentation below is also being addressed in Crowd as well:

      However, it would be for customers to easily cross-check what are the versions of Crowd (and other Atlassian On-Prem products) is not impacted by this issue.

      Suggestion

      Either create a Crowd-version of the similar documentation like Jira, or expand the same document above to include other Atlassian On-Prem products

      Attachments

        Activity

          People

            Unassigned Unassigned
            btan@atlassian.com Damien Tan
            Votes:
            3 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated: