CVE-2019-20902

No fix known EPSS <1%

Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1.

Published 2020-10-01 · CVE record · OSV

Products: Atlassian Crowd