Description
The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Crowd | unspecified – < 3.6.2, 3.7.0 – < unspecified, unspecified – < 3.7.1 | 3.6.2 |
Advisories 1
- WID-SEC-2022-1375 JFrog Artifactory: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025