| Package | Affected versions | Patched versions |
|---|---|---|
| crowd | < 3.1.1 | 3.1.1 |
Various resources in the Crowd Demo application of Atlassian Crowd before version 3.1.1 allow remote attackers to modify add, modify and delete users & groups via a Cross-site request forgery (CSRF) vulnerability. Please be aware that the Demo application is not enabled by default.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free