| Package | Affected versions | Patched versions |
|---|---|---|
| crowd | ≥ 3.5.0, < 3.5.1< 3.4.6 | 3.5.13.4.6 |
Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free